CVE-2026-40018

EUVD-2026-67667
None None None No publicly available exploits are known.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.4 HIGH
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 22.81%
Debian logo
Debian Releases
Debian Product
Codename
dovecot
bookworm
vulnerable
bookworm (security)
vulnerable
forky
1:2.4.5+dfsg1-2
fixed
sid
1:2.4.5+dfsg1-3
fixed
trixie
vulnerable
trixie (security)
1:2.4.1+dfsg1-6+deb13u7
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
dovecot
bionic
needs-triage
focal
needs-triage
jammy
needs-triage
noble
needs-triage
resolute
needs-triage
trusty
needs-triage
xenial
needs-triage
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
dovecot
RHEL 8
1:2.3.16-16.el8_10
fixed
dovecot-devel
RHEL 8
1:2.3.16-16.el8_10
fixed
dovecot-mysql
RHEL 8
1:2.3.16-16.el8_10
fixed
dovecot-pgsql
RHEL 8
1:2.3.16-16.el8_10
fixed
dovecot-pigeonhole
RHEL 8
1:2.3.16-16.el8_10
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
dovecot
Amazon Linux 2023
1:2.3.20-1.amzn2023.0.4
fixed
dovecot-debuginfo
Amazon Linux 2023
1:2.3.20-1.amzn2023.0.4
fixed
dovecot-debugsource
Amazon Linux 2023
1:2.3.20-1.amzn2023.0.4
fixed
dovecot-devel
Amazon Linux 2023
1:2.3.20-1.amzn2023.0.4
fixed
dovecot-mysql
Amazon Linux 2023
1:2.3.20-1.amzn2023.0.4
fixed
dovecot-mysql-debuginfo
Amazon Linux 2023
1:2.3.20-1.amzn2023.0.4
fixed
dovecot-pgsql
Amazon Linux 2023
1:2.3.20-1.amzn2023.0.4
fixed
dovecot-pgsql-debuginfo
Amazon Linux 2023
1:2.3.20-1.amzn2023.0.4
fixed
dovecot-pigeonhole
Amazon Linux 2023
1:2.3.20-1.amzn2023.0.4
fixed
dovecot-pigeonhole-debuginfo
Amazon Linux 2023
1:2.3.20-1.amzn2023.0.4
fixed
Common Weakness Enumeration
Vulnerability Media Exposure
References
https://documentation.open-xchange.com/dovecot/security/advisories/csaf/2026/oxdc-adv-2026-0003.json