CVE-2026-27857

The CVE-2026-27857 issue affects the Dovecot IMAP server where sending a NOOP with 4000+ parentheses causes about 1 MB of memory to be allocated for each connection. Attackers could spawn many connections (potentially from a single IP) to exhaust VSZ and disrupt the service or other proxied conne...