The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response. This can be used to crash ManageSieve service repeatedly, making it unavailable for other users. Control access to ManageSieve port, or disable the service if it's not needed. Alternatively upgrade to a fixed version. No publicly available exploits are known.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade dovecot-mysqlUpgrade dovecotUpgrade dovecot-develUpgrade dovecot-pigeonholeUpgrade dovecot-pgsql | May 6, 2026 | May 5, 2026 |
| Debian | — | Upgrade dovecot | Apr 7, 2026 | Apr 7, 2026 |
| Oracle_linux | — | Upgrade dovecot-pgsqlUpgrade dovecot-develUpgrade dovecot-mysqlUpgrade dovecotUpgrade dovecot-pigeonhole | May 6, 2026 | Mar 27, 2026 |
| Redhat_linux | — | Upgrade dovecot-debuginfoNo solution existsUpgrade dovecot-mysql-debuginfoUpgrade dovecot-pgsqlUpgrade dovecot-pigeonhole-debuginfoUpgrade dovecot-mysqlUpgrade dovecotUpgrade dovecot-develUpgrade dovecot-pigeonholeUpgrade dovecot-debugsourceUpgrade dovecot-pgsql-debuginfo | May 6, 2026 | Mar 27, 2026 |
| Rocky_linux | — | Upgrade dovecot-develUpgrade dovecot-pigeonholeUpgrade dovecot-pgsqlUpgrade dovecot-pgsql-debuginfoUpgrade dovecot-pigeonhole-debuginfoUpgrade dovecot-debugsourceUpgrade dovecotUpgrade dovecot-mysqlUpgrade dovecot-mysql-debuginfoUpgrade dovecot-debuginfo | May 11, 2026 | May 7, 2026 |
| Ubuntu | — | Upgrade dovecot-core | Apr 1, 2026 | Mar 31, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub