PT-2026-40024 · Dovecot · Dovecot

Published 2026-05-12 · Updated 2026-06-02 · CVE-2026-27851

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions dovecot versions prior to 2.4.4-1.1

Description When the safe filter is used with variable expansion, subsequent pipelines on the same string are incorrectly treated as safe. This behavior allows unsafe data to be unescaped, which can lead to SQL or LDAP injection attacks during authentication.

Recommendations Update to version 2.4.4-1.1. Avoid using the safe filter until the update is applied.

Fix

Weakness Enumeration

CWE-235

Related Identifiers

CVE-2026-27851

OPENSUSE-SU-2026:10766-1

USN-8365-1

Affected Products

Dovecot

References · 21

• https://nvd.nist.gov/vuln/detail/CVE-2026-27851 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-27851 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-40020 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-27851 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-27851 · Security Note
• https://ubuntu.com/security/notices/USN-8365-1 · Vendor Advisory
• https://documentation.open-xchange.com/dovecot/security/advisories/csaf/2026/oxdc-adv-2026-0002.json · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-33603 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-42006 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10766-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8365-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-40016 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-27851 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-27851 · Vendor Advisory
• https://suse.com/security/cve/CVE-2026-42006 · Note