Vendor
A misconfiguration vulnerability in Dovecot (CVE-2026-24031) allows authentication bypass and user enumeration when the `auth_username_chars` setting is cleared, potentially leading to unauthorized access to mailboxes.