Log in Start free

Vulnerability · Published May 12, 2026 · Assigned by OX

CVE-2026-27851

High 7.4

In plain English

A high-severity SQL injection in OX Dovecot Pro from Open-Xchange GmbH. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 35% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.4High
Exploit odds (30 days)0.4%top 65.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpreted as safe too, enabling unsafe data to be unescaped. This can enable SQL / LDAP injection attacks when used in authentication. Avoid using safe filter until on fixed version. No publicly available exploits are known.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.23dovecot2.4.4-r0ALPINE-CVE-2026-27851
Alpine:v3.24dovecot2.4.4-r0ALPINE-CVE-2026-27851
Debian:13dovecot1:2.4.1+dfsg1-6+deb13u6DEBIAN-CVE-2026-27851
Debian:14dovecot1:2.4.4+dfsg1-1DEBIAN-CVE-2026-27851
Ubuntu:25.10dovecot1:2.4.1+dfsg1-5ubuntu4.2UBUNTU-CVE-2026-27851
Ubuntu:26.04:LTSdovecot1:2.4.2+dfsg1-3ubuntu2.1UBUNTU-CVE-2026-27851

Affected products (as reported)

VendorProductVersions
Open-Xchange GmbH OX Dovecot Pro 0 – through 3.1.40 – through 2.4.3

Weakness: CWE-235, CWE-89 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

References