https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T12:09:13.470067+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-129821 EUVD-2026-129821 2026-10-17T12:09:13.473802+00:00 EUVD-2026-129821 https://cve.radiocsirt.org/vuln/fkie_cve-2008-4870 fkie_cve-2008-4870 2026-10-17T12:09:13.473838+00:00

dovecot 1.0.7 in Red Hat Enterprise Linux (RHEL) 5, and possibly Fedora, uses world-readable permissions for dovecot.conf, which allows local users to obtain the ssl_key_password parameter value.

 https://cve.radiocsirt.org/vuln/ghsa-7hp8-2g4v-fc2h GHSA-7hp8-2g4v-fc2h 2026-10-17T12:09:13.473869+00:00

dovecot 1.0.7 in Red Hat Enterprise Linux (RHEL) 5, and possibly Fedora, uses world-readable permissions for dovecot.conf, which allows local users to obtain the ssl_key_password parameter value.

 https://cve.radiocsirt.org/vuln/gsd-2008-4870 gsd-2008-4870 2026-10-17T12:09:13.473885+00:00 gsd-2008-4870 https://cve.radiocsirt.org/vuln/rhsa-2009:0205 RHSA-2009:0205 — Red Hat Security Advisory: dovecot security and bug fix update 2026-10-17T12:09:13.473897+00:00

dovecot: incorrect handling of negative rights in the ACL plugin dovecot: ssl_key_password disclosure due to an insecure dovecot.conf permissions