CVE-2026-42006

CVE-2026-42006 describes that an attacker can cause uncontrolled memory usage by sending excessive bracing over IMAP. The underlying issue is an incomplete fix (CVE-2026-27857) that blocked only one of two vulnerability paths—closing braces but allowing open braces to bypass the limit. The result...