Skip to content
Threat Feed
Subscribe

Tag

Dovecot

2 briefs RSS
high advisory

Multiple Vulnerabilities in Dovecot Mail Server

Multiple vulnerabilities in Dovecot can be exploited by an attacker to perform SQL injection attacks, bypass authentication, disclose sensitive information, or cause a denial-of-service condition.

dovecot vulnerability sql-injection authentication-bypass dos
2r 2t
high advisory

Dovecot SQL Authentication Bypass via Misconfigured Username Characters

A misconfiguration vulnerability in Dovecot (CVE-2026-24031) allows authentication bypass and user enumeration when the `auth_username_chars` setting is cleared, potentially leading to unauthorized access to mailboxes.

PoC Dovecot +1 authentication-bypass sql-injection
2r 1t 1c updated