CVE-2026-42392

A flaw was found in Dovecot. An attacker with valid credentials can send an invalid IMAP URLFETCH command, leading to the inclusion of uninitialized memory in the error response. This can disclose process memory contents to the client, potentially revealing sensitive data. Mitigation To mitigate...

Linux Distros Unpatched Vulnerability : CVE-2026-42392

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returne...

ALPINE-CVE-2026-42392

An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Process memory contents can be disclosed to the client, which may include sensitive data. Disable the IMAP URLAUTH...

AZL-98277 CVE-2026-42392 affecting package dovecot 2.3.20-1

An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Process memory contents can be disclosed to the client, which may include sensitive data. Disable the IMAP URLAUTH...

EUVD-2026-67675

An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Process memory contents can be disclosed to the client, which may include sensitive data. Disable the IMAP URLAUTH...

CVE-2026-42392

CVE-2026-42392 affects Open-Xchange Dovecot . An attacker with valid credentials can send an invalid IMAP URLFETCH command, causing uninitialized memory to be included in the error response returned to the client. This discloses process memory contents , which may contain sensitive data. The CVSS...

PT-2026-83068

Name of the Vulnerable Software and Affected Versions dovecot versions prior to 2.4.5-1.1 Description An attacker with valid credentials can send an invalid IMAP URLFETCH command, causing the system to include uninitialized memory in the error response returned to the client. This can lead to the...

CVE-2026-42392

An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Process memory contents can be disclosed to the client, which may include sensitive data. Disable the IMAP URLAUTH...