<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-02T23:56:51.204395+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-337471</id>
    <title>EUVD-2026-337471</title>
    <updated>2026-10-02T23:56:51.315793+00:00</updated>
    <content>EUVD-2026-337471</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-337471"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2026-24031</id>
    <title>fkie_cve-2026-24031</title>
    <updated>2026-10-02T23:56:51.315829+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Dovecot SQL based authentication can be bypassed when auth_username_chars is cleared by admin. This vulnerability allows bypassing authentication for any user and user enumeration. Do not clear auth_username_chars. If this is not possible, install latest fixed version. No publicly available exploits are known.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2026-24031"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-fx6f-5qgf-9fmx</id>
    <title>GHSA-fx6f-5qgf-9fmx</title>
    <updated>2026-10-02T23:56:51.315861+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Dovecot SQL based authentication can be bypassed when auth_username_chars is cleared by admin. This vulnerability allows bypassing authentication for any user and user enumeration. Do not clear auth_username_chars. If this is not possible, install latest fixed version. No publicly available exploits are known.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-fx6f-5qgf-9fmx"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/opensuse-su-2026:10442-1</id>
    <title>openSUSE-SU-2026:10442-1 — dovecot24-2.4.3-1.1 on GA media</title>
    <updated>2026-10-02T23:56:51.315878+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>dovecot24-2.4.3-1.1 on GA media</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/opensuse-su-2026:10442-1"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/oxdc-adv-2026-0001</id>
    <title>OXDC-ADV-2026-0001 — OX Dovecot Security Advisory OXDC-ADV-2026-0001</title>
    <updated>2026-10-02T23:56:51.315900+00:00</updated>
    <content>OXDC-ADV-2026-0001</content>
    <link href="https://cve.radiocsirt.org/vuln/oxdc-adv-2026-0001"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/suse-su-2026:21208-1</id>
    <title>SUSE-SU-2026:21208-1 — Security update for dovecot24</title>
    <updated>2026-10-02T23:56:51.315922+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Security update for dovecot24</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/suse-su-2026:21208-1"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-24031</id>
    <title>UBUNTU-CVE-2026-24031</title>
    <updated>2026-10-02T23:56:51.315942+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Ubuntu:25.10: dovecot</p>
<p>Dovecot SQL based authentication can be bypassed when auth_username_chars is cleared by admin. This vulnerability allows bypassing authentication for any user and user enumeration. Do not clear auth_username_chars. If this is not possible, install latest fixed version. No publicly available exploits are known.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-24031"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0891</id>
    <title>WID-SEC-W-2026-0891 — Dovecot: Mehrere Schwachstellen</title>
    <updated>2026-10-02T23:56:51.315961+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Ein Angreifer kann mehrere Schwachstellen in Dovecot ausnutzen, um SQL-Injection-Angriffe durchzuführen, die Authentifizierung zu umgehen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand herbeizuführen.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0891"/>
  </entry>
</feed>
