CVE-2026-27851
HIGH SEVERITYCVSS Score & Metrics
Base Score
7.4 / 10
Vector String
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Vulnerability Description
When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpreted as safe too, enabling unsafe data to be unescaped. This can enable SQL / LDAP injection attacks when used in authentication. Avoid using safe filter until on fixed version. No publicly available exploits are known.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-235
Source
NVD
Vendor
Open-Xchange GmbH
Product
OX Dovecot Pro
Discussion (0)
Add Comment
No comments yet. Be the first!