Dashboard / CVE-2026-27858

CVE-2026-27858

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-03-27 Modified: 2026-10-26 First seen: 2026-10-29 Status: pending_score

Description

Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large amount of memory. Attacker can force managesieve-login to be unavailable by repeatedly crashing the process. Protect access to managesieve protocol, or install fixed version. No publicly available exploits are known.

Weakness Classification (2)

Affected Software (2)

VendorProductVersion
dovecot dovecot < 2.4.3
open-xchange dovecot < 2.3.22.1

References & Advisories (18)

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.80%
Raw Score 0.008040
Percentile 56.6%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00804
2026-10-28
0.00804

Intelligence Sources

nvd ref →

External Links