← All advisories

High severity7.4NVD Advisory· Published Aug 28, 2026· Updated Sep 3, 2026

CVE-2026-40018

CVE-2026-40018

Description

None None None No publicly available exploits are known.

Affected products

7

Open-Xchange/Dovecotllm-fuzzy
osv-coords6 versions
pkg:rpm/almalinux/dovecot pkg:rpm/almalinux/dovecot-devel pkg:rpm/almalinux/dovecot-mysql pkg:rpm/almalinux/dovecot-pgsql pkg:rpm/almalinux/dovecot-pigeonhole pkg:rpm/opensuse/dovecot24&distro=openSUSE%20Leap%2016.0
< 1:2.3.16-16.el8_10+ 5 more
- (no CPE)range: < 1:2.3.16-16.el8_10
- (no CPE)range: < 1:2.3.16-16.el8_10
- (no CPE)range: < 1:2.3.16-16.el8_10
- (no CPE)range: < 1:2.3.16-16.el8_10
- (no CPE)range: < 1:2.3.16-16.el8_10
- (no CPE)range: < 2.4.4-160000.2.1

Patches

Vulnerability mechanics

References

1

documentation.open-xchange.com/dovecot/security/advisories/csaf/2026/oxdc-adv-2026-0003.jsonnvd

News mentions

1

Dovecot: 17 Vulnerabilities Including Critical Flaws Disclosed Together on August 28, 2026
Vypr Intelligence · Aug 28, 2026