https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 09:51:57 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-277729 EUVD-2026-277729 https://cve.radiocsirt.org/vuln/euvd-2026-277729 https://cve.radiocsirt.org/vuln/fkie_cve-2026-27860 <p>If auth_username_chars is empty, it is possible to inject arbitrary LDAP filter to Dovecot&#39;s LDAP authentication. This leads to potentially bypassing restrictions and allows probing of LDAP structure. Do not clear out auth_username_chars, or install fixed version. No publicly available exploits are known.</p> <p>If auth_username_chars is empty, it is possible to inject arbitrary LDAP filter to Dovecot&#39;s LDAP authentication. This leads to potentially bypassing restrictions and allows probing of LDAP structure. Do not clear out auth_username_chars, or install fixed version. No publicly available exploits are known.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-27860 https://cve.radiocsirt.org/vuln/ghsa-3322-wpc2-p4m7 <p>If auth_username_chars is empty, it is possible to inject arbitrary LDAP filter to Dovecot&#39;s LDAP authentication. This leads to potentially bypassing restrictions and allows probing of LDAP structure. Do not clear out auth_username_chars, or install fixed version. No publicly available exploits are known.</p> <p>If auth_username_chars is empty, it is possible to inject arbitrary LDAP filter to Dovecot&#39;s LDAP authentication. This leads to potentially bypassing restrictions and allows probing of LDAP structure. Do not clear out auth_username_chars, or install fixed version. No publicly available exploits are known.</p> https://cve.radiocsirt.org/vuln/ghsa-3322-wpc2-p4m7 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10442-1 <p>dovecot24-2.4.3-1.1 on GA media</p> <p>dovecot24-2.4.3-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10442-1 https://cve.radiocsirt.org/vuln/oxdc-adv-2026-0001 OXDC-ADV-2026-0001 https://cve.radiocsirt.org/vuln/oxdc-adv-2026-0001 https://cve.radiocsirt.org/vuln/suse-su-2026:21208-1 <p>Security update for dovecot24</p> <p>Security update for dovecot24</p> https://cve.radiocsirt.org/vuln/suse-su-2026:21208-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-27860 <p><strong>Affected:</strong> Ubuntu:25.10: dovecot</p> <p>If auth_username_chars is empty, it is possible to inject arbitrary LDAP filter to Dovecot&#39;s LDAP authentication. This leads to potentially bypassing restrictions and allows probing of LDAP structure. Do not clear out auth_username_chars, or install fixed version. No publicly available exploits are known.</p> <p><strong>Affected:</strong> Ubuntu:25.10: dovecot</p> <p>If auth_username_chars is empty, it is possible to inject arbitrary LDAP filter to Dovecot&#39;s LDAP authentication. This leads to potentially bypassing restrictions and allows probing of LDAP structure. Do not clear out auth_username_chars, or install fixed version. No publicly available exploits are known.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-27860 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0891 <p>Ein Angreifer kann mehrere Schwachstellen in Dovecot ausnutzen, um SQL-Injection-Angriffe durchzuführen, die Authentifizierung zu umgehen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand herbeizuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Dovecot ausnutzen, um SQL-Injection-Angriffe durchzuführen, die Authentifizierung zu umgehen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand herbeizuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0891