Report: Latest: CVE-2026-27858 - Dovecot Managesieve Denial of Service and Memory Exhaustion

Report: Latest: CVE-2026-27858 - Dovecot Managesieve Denial of Service and Memory Exhaustion

CVE ID :CVE-2026-27858 Published : March 27, 2026, 9:16 a.m. | 23 minutes ago Description :Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large amount of memory. Attacker can force managesieve-login to be unavailable by repeatedly crashing the process. Protect access to managesieve protocol, or install fixed version. No publicly available exploits are known. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
HIGH
Published
March 27, 2026