CVE-2026-75004

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, improper rule name quoting could lead to managesievedisabledactions setting bypass via a crafted rule name in a Sieve script. This issue only affects Roundcube instances using the managesieve plugin...

CVE-2026-75002

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, mail search and LITERAL+ byte-count desynchronization could lead to information disclosure or privilege escalation via IMAP command injection...

MiracleLinux 9 : dovecot-2.3.16-18.el9_8.1 (AXSA:2026-1524:06)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1524:06 advisory. dovecot: Dovecot: Denial of Service via excessive IMAP bracing CVE-2026-42006 Tenable has extracted the preceding description block directly from the...

Exploit for SQL Injection in Dovecot

CVE-2026-24031: Dovecot SQL authentication bypass authenticat...

TencentOS Server 2: dovecot (TSSA-2026:0831)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0831 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

Oracle Linux 7 : dovecot (ELSA-2026-49513)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-49513 advisory. - Backport fix for CVE-2026-42006 Orabug: 39820967 - Backport fix for CVE-2025-59032 Orabug: 39573795 - Backport fix for CVE-2026-27856 Orabug: 39573795 -...

Alibaba Cloud Linux 3 : 0245: dovecot (ALINUX3-SA-2026:0245)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0245 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-42006: An attacker can cause uncontrolled...

RHSA-2026:49513 Red Hat Security Advisory: dovecot security update

Bulletin has no description...

dovecot: Dovecot: Denial of Service via excessive IMAP bracing

A flaw was found in Dovecot. A remote attacker can exploit this vulnerability by sending excessive open braces over the Internet Message Access Protocol IMAP, leading to uncontrolled memory usage. This can cause the affected system to consume memory up to its configured limit, resulting in a Deni...

Important: Red Hat Security Advisory: dovecot security update

An update for dovecot is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

MiracleLinux 8 : dovecot-2.3.16-8.el8_10 (AXSA:2026-1416:05)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1416:05 advisory. dovecot: Dovecot: Denial of Service via excessive IMAP bracing CVE-2026-42006 Tenable has extracted the preceding description block directly from the...

RHEL 7 : dovecot (RHSA-2026:49513)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:49513 advisory. Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and...

Oracle Linux 8 : dovecot (ELSA-2026-46532)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-46532 advisory. 1:2.3.16-8 - fix CVE-2026-42006: fix IMAP parser listcountlimit to correctly limit open braces instead of close braces RHEL-188480 Tenable has extracted the...

RLSA-2026:46532 Important: dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fixes: doveco...

dovecot security update

An update is available for dovecot. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Dovecot is an IMAP server for Linux and other UNIX-like systems, written...

RHSA-2026:46532 Red Hat Security Advisory: dovecot security update

Bulletin has no description...

RHSA-2026:46381 Red Hat Security Advisory: dovecot security update

Bulletin has no description...

RHSA-2026:46380 Red Hat Security Advisory: dovecot security update

Bulletin has no description...

RHSA-2026:46379 Red Hat Security Advisory: dovecot security update

Bulletin has no description...

RockyLinux 8 : dovecot (RLSA-2026:46532)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:46532 advisory. dovecot: Dovecot: Denial of Service via excessive IMAP bracing CVE-2026-42006 Tenable has extracted the preceding description block directly from the RockyLinux...