CVE-2026-42392

CVE-2026-42392 affects Open-Xchange Dovecot . An attacker with valid credentials can send an invalid IMAP URLFETCH command, causing uninitialized memory to be included in the error response returned to the client. This discloses process memory contents , which may contain sensitive data. The CVSS...