VDB
CVE-2026-27859
CVE-2026-27859
PUBLISHED
CVSS 5.300000190734863 MEDIUM
A mail message containing excessive amount of RFC 2231 MIME parameters causes LMTP to use too much CPU. A suitably formatted mail message causes mail delivery process to consume large amounts of CPU time. Use MTA capabilities to limit RFC 2231 MIME parameters in mail messages, or upgrade to fixed version where the processing is limited. No publicly available exploits are known.
EPSS 0.03% · 9.8th percentile
Risk Scores
CVSS v3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS Score
0.03%
9.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Open-Xchange GmbH | OX Dovecot Pro | 0, 0, 0 |
Timeline
- Mar 27, 2026 Coalition ESS Score
- Mar 27, 2026 CVE Published
- Mar 27, 2026 PoC Published
- Mar 29, 2026 Security Advisory
- Apr 30, 2026 CVE Updated
- May 18, 2026 EPSS Score
- May 19, 2026 EPSS Score
- May 20, 2026 EPSS Score
- May 21, 2026 EPSS Score
- May 22, 2026 EPSS Score
- May 23, 2026 EPSS Score
- May 24, 2026 EPSS Score