44 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-40018
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - None None None No publicly available exploits are known. CVE-2026-40018 Note that Nessus relies on the presence of the package as reported by the vendor...
CVE-2026-40204
None None None No publicly available exploits are known...
AZL-98319 CVE-2026-40018 affecting package dovecot 2.3.20-1
None None None No publicly available exploits are known...
CVE-2026-40018
None None None No publicly available exploits are known...
EUVD-2026-67670
None None None No publicly available exploits are known...
EUVD-2026-67667
None None None No publicly available exploits are known...
CVE-2026-40018
This CVE entry for CVE-2026-40018 is currently a placeholder with no publicly available technical details. The associated vendor is Open-Xchange (Dovecot). Monitor for updates.
CVE-2026-40018
None None None No publicly available exploits are known...
PT-2026-83063
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description No information is available regarding the nature of this issue. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...
PT-2026-40025
Name of the Vulnerable Software and Affected Versions Dovecot versions prior to 2.4.4-1.1 Description An attacker positioned between Dovecot and the client connection can use a specially crafted base64 exchange to fake SCRAM TLS channel binding. This allows the attacker to act as a MITM...
April "In the Trend of VM" (#26): one Microsoft SharePoint vulnerability
April "In the Trend of VM" 26: one Microsoft SharePoint vulnerability. Presenting the traditional monthly roundup of trending vulnerabilities according to Positive Technologies. Once again, it is single-vendor, Microsoft-related, and this time it could not be more compact. While the previous Marc...
Linux Distros Unpatched Vulnerability : CVE-2025-59032
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response. This can be used to crash ManageSieve service repeatedly, making it...
EUVD-2026-16561
Dovecot SQL based authentication can be bypassed when authusernamechars is cleared by admin. This vulnerability allows bypassing authentication for any user and user enumeration. Do not clear authusernamechars. If this is not possible, install latest fixed version. No publicly available exploits...
CVE-2026-27858
Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large amount of memory. Attacker can force managesieve-login to be unavailable by repeatedly crashing the process. Protect access to managesieve protocol, or install fixed version. No public...
CVE-2026-27859
The CVE-2026-27859 issue concerns LMTP processing of mail messages with excessive RFC 2231 MIME parameters, which can cause unusually high CPU usage in the mail delivery process. Affected systems are those that rely on LMTP for mail transfer; the underlying cause is the handling/parsing of RFC 22...
CVE-2026-27858
Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large amount of memory. Attacker can force managesieve-login to be unavailable by repeatedly crashing the process. Protect access to managesieve protocol, or install fixed version. No public...
About Elevation of Privilege - Desktop Window Manager (CVE-2026-21519) vulnerability
About Elevation of Privilege - Desktop Window Manager CVE-2026-21519 vulnerability. The vulnerability is from the February Microsoft Patch Tuesday. Desktop Window Manager is a compositing window manager included in Windows starting with Windows Vista. A Type Confusion error CWE-843 in Desktop...
EUVD-2025-199815
Malicious content uploaded as file can be used to execute script code when following attacker-controlled links. Unintended actions can be executed in the context of the users account, including exfiltration of sensitive information. Please deploy the provided updates and patch releases. No public...
EUVD-2025-199812
Malicious content uploaded as file can be used to execute script code when following attacker-controlled links. Unintended actions can be executed in the context of the users account, including exfiltration of sensitive information. Please deploy the provided updates and patch releases. No public...