Home

Description

Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large amount of memory. Attacker can force managesieve-login to be unavailable by repeatedly crashing the process. Protect access to managesieve protocol, or install fixed version. No publicly available exploits are known.

PUBLISHED Reserved 2026-02-24 | Published 2026-03-27 | Updated 2026-03-27 | Assigner OX




HIGH: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Problem types

Uncontrolled Resource Consumption

Product status

Default status
unaffected

Any version
affected

Any version
affected

Any version
affected

References

documentation.open-xchange.com/...26/oxdc-adv-2026-0001.json vendor-advisory

cve.org (CVE-2026-27858)

nvd.nist.gov (CVE-2026-27858)

Download JSON