Get real-time updates on Telegram
CVE-2026-27852, CVE-2026-33263, CVE-2026-33605 +5 more CVEs: Affected product not specified by the source
CVE-2026-27852, CVE-2026-33263, CVE-2026-33605, CVE-2026-40018, CVE-2026-40019, CVE-2026-42007, CVE-2026-42391, CVE-2026-73208 affects dovecot. EPSS 0.0043 (percentile 0.35457), scored 13-Oct-2026. Fixed version: 1:2.3.16-18.el9_8.8.
CVE-2026-27852
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
Attack conditions (OSV, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required
What an attacker can do
OSV’s CVSS 3.1 assessment rates confidentiality and integrity impact as low; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-33263
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
Attack conditions (OSV, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required
What an attacker can do
OSV’s CVSS 3.1 assessment rates confidentiality and integrity impact as low; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-33605
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
Attack conditions (OSV, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required
What an attacker can do
OSV’s CVSS 3.1 assessment rates confidentiality and integrity impact as low; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-40018
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
Attack conditions (OSV, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required
What an attacker can do
OSV’s CVSS 3.1 assessment rates confidentiality and integrity impact as low; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-40019
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
Attack conditions (OSV, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required
What an attacker can do
OSV’s CVSS 3.1 assessment rates confidentiality and integrity impact as low; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-42007
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
Attack conditions (OSV, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required
What an attacker can do
OSV’s CVSS 3.1 assessment rates confidentiality and integrity impact as low; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-42391
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
Attack conditions (OSV, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required
What an attacker can do
OSV’s CVSS 3.1 assessment rates confidentiality and integrity impact as low; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
CVE-2026-73208
Affected technology
Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
Attack conditions (OSV, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required
What an attacker can do
OSV’s CVSS 3.1 assessment rates confidentiality and integrity impact as low; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CVE
- CVE-2026-40018, CVE-2026-40019, CVE-2026-42007, CVE-2026-42391, CVE-2026-73208
- Product
- dovecot
- CCR priority
- 0.1 /100 (P5)
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H · OSV.dev
- EPSS
- 0.0043 · percentile 0.35457 · 2026-10-13
- KEV
- no
Provenance
- OSV.dev · Source record · observed 2026-10-14 07:03:36.411962+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-27852.html