EUVD-2026-67670
GHSA-wxgx-37c3-39ph
Severity by source
AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
PR:L confirmed since valid account is required; AC:H reflects non-trivial trigger condition; C and A remain N given no confirmed confidentiality or availability impact.
Primary rating from Vendor (OX).
CVSS VectorVendor: OX
Lifecycle Timeline
2DescriptionCVE.org
None None None No publicly available exploits are known.
AnalysisAI
Authentication bypass in OX Dovecot Pro and OX Dovecot CE (both Open-Xchange GmbH email server products) allows a low-privileged authenticated attacker to circumvent access controls and achieve limited integrity impact over the mail service. The vulnerability is classified under CWE-284 (Improper Access Control) and carries a low CVSS base score of 3.1, reflecting high attack complexity and constrained impact - no confidentiality or availability loss is indicated. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an existing valid low-privilege account on the OX Dovecot Pro or OX Dovecot CE mail server (PR:L confirmed by CVSS vector), meaning unauthenticated internet-facing exploitation is not possible. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The overall real-world risk of this vulnerability is low, consistent with its CVSS base score of 3.1. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Consult the vendor CSAF advisory at https://documentation.open-xchange.com/dovecot/security/advisories/csaf/2026/oxdc-adv-2026-0003.json for the specific patched version of OX Dovecot Pro and OX Dovecot CE - an exact fix version is not independently confirmed from the available intelligence data. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Ox Dovecot Pro
View allUse-after-free in the OX Dovecot Pro and Dovecot CE mail-editing code lets an authenticated user who can install a Sieve
Authentication-layer injection in OX Dovecot Pro (versions up to and including 2.4.3 and 3.1.4) arises from a flaw in th
Authentication bypass and user enumeration in OX Dovecot Pro (versions up to and including 3.1.0 and the 2.4.x line up t
Open-Xchange Dovecot Pro contains an LDAP filter injection vulnerability in its authentication module that allows remote
Denial of service in OX Dovecot Pro and OX Dovecot CE allows unauthenticated remote attackers to exhaust memory and CPU
ManageSieve login process in OX Dovecot CE and Pro crashes on receipt of a small malformed pre-authentication command, e
Memory exhaustion in OX Dovecot Pro and OX Dovecot CE allows any remote sender to deny IMAP service to a targeted user b
OX Dovecot Pro ManageSieve service crashes when processing AUTHENTICATE commands with SASL initial responses using liter
OX Dovecot Pro managesieve-login process crashes repeatedly due to memory exhaustion triggered by unauthenticated attack
Remote memory-exhaustion denial of service in OX Dovecot Pro (versions up to and including 2.3.0) lets an unauthenticate
SQL injection in Open-Xchange OX Dovecot Pro and OX Dovecot CE enables unauthenticated remote attackers, under high-comp
OAuth2 token validation in OX Dovecot Pro and OX Dovecot CE contains a logic error that permits authentication bypass wh
Same weakness CWE-284 – Improper Access Control
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today