CVEFinder.io

CVE-2026-27851

⚠ī¸ high
🔍 Scan for this CVE
Summary

When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpreted as safe too, enabling unsafe data to be unescaped. This can enable SQL / LDAP injection attacks when used in authentication. Avoid using safe filter until on fixed version. No publicly available exploits are known.

CVSS Score
7.4
High
EPSS Score
0.0
Exploit Probability
Published Date
2026-05-12
First Seen: 2026-05-19
📊 Relative Risk Intelligence

This CVE is Moderate Risk - more severe than 57.0% of all 326,604 vulnerabilities in our database.

#140,444
Above average severity
Severity Percentile
đŸŽ¯ CISA SSVC Assessment Updated: May 12, 2026
🔍 Exploitation Status
None
No known exploits
⚙ī¸ Automatable
NO
Requires human interaction
đŸ’Ĩ Technical Impact
Total
Complete system compromise possible
SSVC data provided by CISA
Last Modified 2026-05-18
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE IDs (Weakness Types)
CWE-235

đŸ“Ļ Affected Products 1

Vendor Product Status Affected Versions
dovecot dovecot Affected
< 2.4.4

🔗 References 1

https://documentation.open-xchange.com/dovecot/secur...
Vendor Advisory

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-33603 đŸ”ļ medium 6.8 0.0 Attacker can use a specially crafted base64 exchange between Dovecot and Client to fake SCRAM TLS channel binding. This ... 2026-05-12
CVE-2026-40016 đŸ”ļ medium 5.3 0.0 Attacker can upload a malicious Sieve script over ManageSieve service (or locally) to bypass configured CPU time limits ... 2026-05-12
CVE-2026-40020 ℹī¸ low 3.1 0.0 Attacker can use the IMAP SETACL command to inject the anyone permission to user's dovecot-acl file even if imap_acl_all... 2026-05-12
CVE-2026-42006 đŸ”ļ medium 4.3 0.0 An attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE-2026-27857 was incomple... 2026-05-12
CVE-2025-59028 đŸ”ļ medium 5.3 0.1 When sending invalid base64 SASL data, login process is disconnected from the auth server, causing all active authentica... 2026-03-27
CVE-2025-59032 ⚠ī¸ high 7.5 0.1 ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response. This can be used to crash ManageSi... 2026-03-27
These CVEs affect the same products