# Open-Xchange GmbH OX Dovecot CE.

Every CVE that names Open-Xchange GmbH OX Dovecot CE among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Uncontrolled recursion in Open-Xchange GmbH OX Dovecot Pro and others](https://agentprime.io/advisories/CVE-2026-73209.md)
  `CVE-2026-73209` · CVE record: Open-Xchange GmbH OX Dovecot Pro and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Denial of service
- [Improper authentication in Open-Xchange GmbH OX Dovecot Pro and others](https://agentprime.io/advisories/CVE-2026-73208.md)
  `CVE-2026-73208` · CVE record: Open-Xchange GmbH OX Dovecot Pro and 1 more · CVSS 7.4 High · Not analysed yet · Published 28 Aug 2026 · Tags: Authentication bypass
- [Uncontrolled resource consumption in Open-Xchange GmbH OX Dovecot Pro and others](https://agentprime.io/advisories/CVE-2026-52687.md)
  `CVE-2026-52687` · CVE record: Open-Xchange GmbH OX Dovecot Pro and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Denial of service
- [Sieve CPU resource usage is tracked in the compiled script, so an attacker that has valid credentials can reset the accounting by repeatedly changing the active script.](https://agentprime.io/advisories/CVE-2026-52681.md)
  `CVE-2026-52681` · CVE record: Open-Xchange GmbH OX Dovecot Pro and 1 more · CVSS 3.1 Low · Not analysed yet · Published 28 Aug 2026 · Tags: CWE-1050
- [Uncontrolled resource consumption in Open-Xchange GmbH OX Dovecot Pro and others](https://agentprime.io/advisories/CVE-2026-42395.md)
  `CVE-2026-42395` · CVE record: Open-Xchange GmbH OX Dovecot Pro and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Denial of service
- [Information disclosure in Open-Xchange GmbH OX Dovecot Pro and others](https://agentprime.io/advisories/CVE-2026-42393.md)
  `CVE-2026-42393` · CVE record: Open-Xchange GmbH OX Dovecot Pro and 1 more · CVSS 3.1 Low · Not analysed yet · Published 28 Aug 2026 · Tags: Information disclosure
- [Information disclosure in Open-Xchange GmbH OX Dovecot Pro and others](https://agentprime.io/advisories/CVE-2026-42392.md)
  `CVE-2026-42392` · CVE record: Open-Xchange GmbH OX Dovecot Pro and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Information disclosure
- [Uncontrolled resource consumption in Open-Xchange GmbH OX Dovecot Pro and others](https://agentprime.io/advisories/CVE-2026-42391.md)
  `CVE-2026-42391` · CVE record: Open-Xchange GmbH OX Dovecot Pro and 1 more · CVSS 7.5 High · Not analysed yet · Published 28 Aug 2026 · Tags: Denial of service
- [Improper authentication in Open-Xchange GmbH OX Dovecot Pro and others](https://agentprime.io/advisories/CVE-2026-42008.md)
  `CVE-2026-42008` · CVE record: Open-Xchange GmbH OX Dovecot Pro and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Authentication bypass
- [Use after free in Open-Xchange GmbH OX Dovecot Pro and others](https://agentprime.io/advisories/CVE-2026-42007.md)
  `CVE-2026-42007` · CVE record: Open-Xchange GmbH OX Dovecot Pro and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Memory corruption
- [Improper authentication in Open-Xchange GmbH OX Dovecot Pro and others](https://agentprime.io/advisories/CVE-2026-40205.md)
  `CVE-2026-40205` · CVE record: Open-Xchange GmbH OX Dovecot Pro and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Authentication bypass
- [Improper access control in Open-Xchange GmbH OX Dovecot Pro and others](https://agentprime.io/advisories/CVE-2026-40204.md)
  `CVE-2026-40204` · CVE record: Open-Xchange GmbH OX Dovecot Pro and 1 more · CVSS 3.1 Low · Not analysed yet · Published 28 Aug 2026 · Tags: Broken access control
- [Information disclosure in Open-Xchange GmbH OX Dovecot Pro and others](https://agentprime.io/advisories/CVE-2026-40203.md)
  `CVE-2026-40203` · CVE record: Open-Xchange GmbH OX Dovecot Pro and 1 more · CVSS 3.7 Low · Not analysed yet · Published 28 Aug 2026 · Tags: Information disclosure
- [Uncontrolled resource consumption in Open-Xchange GmbH OX Dovecot CE](https://agentprime.io/advisories/CVE-2026-40019.md)
  `CVE-2026-40019` · CVE record: Open-Xchange GmbH OX Dovecot CE · CVSS 5.9 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Denial of service
- [SQL injection in Open-Xchange GmbH OX Dovecot Pro and others](https://agentprime.io/advisories/CVE-2026-40018.md)
  `CVE-2026-40018` · CVE record: Open-Xchange GmbH OX Dovecot Pro and 1 more · CVSS 7.4 High · Not analysed yet · Published 28 Aug 2026 · Tags: SQL injection
- [Uncontrolled resource consumption in Open-Xchange GmbH OX Dovecot Pro and others](https://agentprime.io/advisories/CVE-2026-40017.md)
  `CVE-2026-40017` · CVE record: Open-Xchange GmbH OX Dovecot Pro and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Denial of service
- [Out-of-bounds read in Open-Xchange GmbH OX Dovecot Pro and others](https://agentprime.io/advisories/CVE-2026-40015.md)
  `CVE-2026-40015` · CVE record: Open-Xchange GmbH OX Dovecot Pro and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Memory corruption
- [Uncontrolled resource consumption in Open-Xchange GmbH OX Dovecot Pro and others](https://agentprime.io/advisories/CVE-2026-40014.md)
  `CVE-2026-40014` · CVE record: Open-Xchange GmbH OX Dovecot Pro and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Denial of service
- [An attacker that has valid credentials can submit a Sieve script containing an extreme numeric literal, which causes an out-of-bounds write when the ManageSieve service compiles the script.](https://agentprime.io/advisories/CVE-2026-40013.md)
  `CVE-2026-40013` · CVE record: Open-Xchange GmbH OX Dovecot Pro and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Memory corruption
- [Uncontrolled resource consumption in Open-Xchange GmbH OX Dovecot Pro and others](https://agentprime.io/advisories/CVE-2026-33607.md)
  `CVE-2026-33607` · CVE record: Open-Xchange GmbH OX Dovecot Pro and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Denial of service
- [CRLF injection in Open-Xchange GmbH OX Dovecot Pro and others](https://agentprime.io/advisories/CVE-2026-33606.md)
  `CVE-2026-33606` · CVE record: Open-Xchange GmbH OX Dovecot Pro and 1 more · CVSS 4.8 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Other injection
- [Uncontrolled resource consumption in Open-Xchange GmbH OX Dovecot Pro and others](https://agentprime.io/advisories/CVE-2026-33605.md)
  `CVE-2026-33605` · CVE record: Open-Xchange GmbH OX Dovecot Pro and 1 more · CVSS 7.5 High · Not analysed yet · Published 28 Aug 2026 · Tags: Denial of service
- [An attacker that can get Dovecot to relay a message, for example through Sieve redirect or submission relay, can use a crafted line ending in the message body to bypass the outbound protection that p…](https://agentprime.io/advisories/CVE-2026-33604.md)
  `CVE-2026-33604` · CVE record: Open-Xchange GmbH OX Dovecot Pro and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: CWE-655
- [When mail_max_userip_connections is set (default 10) and reached, submission-login can crash with epoll() panic caused by file descriptor handling issues.](https://agentprime.io/advisories/CVE-2026-33263.md)
  `CVE-2026-33263` · CVE record: Open-Xchange GmbH OX Dovecot Pro and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: CWE-403
- [Uncontrolled resource consumption in Open-Xchange GmbH OX Dovecot Pro and others](https://agentprime.io/advisories/CVE-2026-27852.md)
  `CVE-2026-27852` · CVE record: Open-Xchange GmbH OX Dovecot Pro and 1 more · CVSS 7.5 High · Not analysed yet · Published 28 Aug 2026 · Tags: Denial of service

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=open-xchange-gmbh-ox-dovecot-ce>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/open-xchange-gmbh-ox-dovecot-ce/>. Everything for agents: <https://agentprime.io/llms.txt>.