{"schemaVersion":3,"id":"SUSE-SU-2026:4139-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for dovecot23\n\nThis update for dovecot23 fixes the following issues:\n\n- CVE-2024-23184: parsing of messages containing many address headers (From, To, Cc, Bcc, etc.) could be excessively CPU\n  intensive (bsc#1229184).\n- CVE-2024-23185: large headers can cause resource exhaustion when parsing message (bsc#1229183).\n- CVE-2025-59028: Invalid base64 authentication can cause DoS for other logins (bsc#1260894).\n- CVE-2025-59031: decode2text.sh OOXML extraction may follow symlinks and read unintended files during indexing\n  (bsc#1260895).\n- CVE-2025-59032: pigeonhole: ManageSieve panic occurs with sieve-connect as a client (bsc#1260902).\n- CVE-2026-27852: DoS by sending mail with bad header (bsc#1276799).\n- CVE-2026-27855: OTP driver vulnerable to replay attack (bsc#1260900).\n- CVE-2026-27856: Doveadm credentials were not checked using timing-safe checking function (bsc#1260899).\n- CVE-2026-27857: sending excessive parenthesis causes imap-login to use excessive memory (bsc#1260898).\n- CVE-2026-27858: pigeonhole: managesieve-login can allocate large amount of memory during authentication (bsc#1260901).\n- CVE-2026-27859: excessive RFC 2231 MIME parameters in email would can excessive CPU usage (bsc#1260897).\n- CVE-2026-33263: submission-login: Panic when mail_max_userip_connections is reached (bsc#1276794).\n- CVE-2026-33603: login: base64 input can contain tabs that bypass IPC protection (bsc#1265147).\n- CVE-2026-33604: SMTP Smuggling via Missing Dot-Stuffing (bsc#1276802).\n- CVE-2026-33605: managesieve-login: Pre-auth crash (bsc#1276809).\n- CVE-2026-33606: dsync: Mail content can cause dsync protocol injection (bsc#1276800).\n- CVE-2026-33607: IMAP LIST match_sub() Exponential Backtracking -- CPU Denial of Service (bsc#1276795).\n- CVE-2026-40014: CPU DoS via Crafted References Header (bsc#1276804).\n- CVE-2026-40015: imap-hibernate can be crashed (bsc#1276812).\n- CVE-2026-40016: Sieve :contains/:matches O(NxM) substring match bypasses sieve_max_cpu_time limit (bsc#1265148).\n- CVE-2026-40019: managesieve-login pre-auth infinite loop (bsc#1276811).\n- CVE-2026-40020: IMAP folders can be shared-spammed to everyone (bsc#1265149).\n- CVE-2026-40203: IMAP Compression Can Reveal Whether a Small Synced Email Body Matches Sender-Chosen Text\n  (bsc#1276815).\n- CVE-2026-40205: OAuth2 passdb scope enforcement bypass via OR semantics in remote validation path (bsc#1276820).\n- CVE-2026-42006: imap-login: uncontrolled memory usage with excessive bracing over IMAP (bsc#1265150).\n- CVE-2026-42007: editheader RCE (bsc#1276817).\n- CVE-2026-42008: XCLIENT FORWARD= bare token not namespaced (bsc#1276824).\n- CVE-2026-42391: imap: Pre-login memory/CPU growth with ID command (bsc#1276835).\n- CVE-2026-42393: doveadm_password or api key length can still be leaked with timing comparisons (bsc#1276827).\n- CVE-2026-42395: Single NUL-Byte XCLIENT FORWARD Payload Crashes (bsc#1276826).\n- CVE-2026-52681: Sieve resource usage tracking lost when active script changes (bsc#1276828).\n- CVE-2026-52687: IMAP: COMPRESS ZSTD can cause excessive memory usage (bsc#1276837).\n- CVE-2026-73208: auth: db-oauth2: aud claim used as fallback for missing scope claim (bsc#1276830).\n- CVE-2026-73209: imap-login crash: Self-recursion on zero-output decompress chunks (bsc#1276833).\n\nChanges for dovecot23:\n\n- Update to version 2.3.21.1.","dates":{"published":"2026-09-14T07:22:32.000Z","modified":"2026-09-28T18:23:12.561Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"dovecot23&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","name":"dovecot23","label":"dovecot23&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot23&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","purlType":"rpm","versions":[{"text":"< 2.3.21.1-150200.76.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.21.1-150200.76.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot23&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","name":"dovecot23","label":"dovecot23&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot23&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 2.3.21.1-150200.76.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.21.1-150200.76.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot23&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","name":"dovecot23","label":"dovecot23&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot23&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","purlType":"rpm","versions":[{"text":"< 2.3.21.1-150200.76.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.21.1-150200.76.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot23&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","name":"dovecot23","label":"dovecot23&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot23&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","purlType":"rpm","versions":[{"text":"< 2.3.21.1-150200.76.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.21.1-150200.76.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot23&distro=SUSE Linux Enterprise Module for Server Applications 15 SP7","name":"dovecot23","label":"dovecot23&distro=SUSE Linux Enterprise Module for Server Applications 15 SP7","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot23&distro=SUSE Linux Enterprise Module for Server Applications 15 SP7","purlType":"rpm","versions":[{"text":"< 2.3.21.1-150200.76.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.21.1-150200.76.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot23&distro=SUSE Linux Enterprise Server 15 SP4-LTSS","name":"dovecot23","label":"dovecot23&distro=SUSE Linux Enterprise Server 15 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot23&distro=SUSE Linux Enterprise Server 15 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 2.3.21.1-150200.76.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.21.1-150200.76.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot23&distro=SUSE Linux Enterprise Server 15 SP5-LTSS","name":"dovecot23","label":"dovecot23&distro=SUSE Linux Enterprise Server 15 SP5-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot23&distro=SUSE Linux Enterprise Server 15 SP5-LTSS","purlType":"rpm","versions":[{"text":"< 2.3.21.1-150200.76.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.21.1-150200.76.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot23&distro=SUSE Linux Enterprise Server 15 SP6-LTSS","name":"dovecot23","label":"dovecot23&distro=SUSE Linux Enterprise Server 15 SP6-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot23&distro=SUSE Linux Enterprise Server 15 SP6-LTSS","purlType":"rpm","versions":[{"text":"< 2.3.21.1-150200.76.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.21.1-150200.76.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot23&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4","name":"dovecot23","label":"dovecot23&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot23&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4","purlType":"rpm","versions":[{"text":"< 2.3.21.1-150200.76.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.21.1-150200.76.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot23&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP5","name":"dovecot23","label":"dovecot23&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot23&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP5","purlType":"rpm","versions":[{"text":"< 2.3.21.1-150200.76.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.21.1-150200.76.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dovecot23&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP6","name":"dovecot23","label":"dovecot23&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dovecot23&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP6","purlType":"rpm","versions":[{"text":"< 2.3.21.1-150200.76.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.3.21.1-150200.76.1","eol":null,"hubHref":null}],"affectedCount":11,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264139-1/","label":"www.suse.com/support/update/announcement/2026/suse-su-20264139-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1229183","label":"bugzilla.suse.com/1229183","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1229184","label":"bugzilla.suse.com/1229184","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1260894","label":"bugzilla.suse.com/1260894","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1260895","label":"bugzilla.suse.com/1260895","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1260897","label":"bugzilla.suse.com/1260897","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1260898","label":"bugzilla.suse.com/1260898","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1260899","label":"bugzilla.suse.com/1260899","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1260900","label":"bugzilla.suse.com/1260900","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1260901","label":"bugzilla.suse.com/1260901","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1260902","label":"bugzilla.suse.com/1260902","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1265147","label":"bugzilla.suse.com/1265147","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1265148","label":"bugzilla.suse.com/1265148","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1265149","label":"bugzilla.suse.com/1265149","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1265150","label":"bugzilla.suse.com/1265150","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1276794","label":"bugzilla.suse.com/1276794","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1276795","label":"bugzilla.suse.com/1276795","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1276799","label":"bugzilla.suse.com/1276799","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1276800","label":"bugzilla.suse.com/1276800","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1276802","label":"bugzilla.suse.com/1276802","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1276804","label":"bugzilla.suse.com/1276804","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1276809","label":"bugzilla.suse.com/1276809","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1276811","label":"bugzilla.suse.com/1276811","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1276812","label":"bugzilla.suse.com/1276812","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1276815","label":"bugzilla.suse.com/1276815","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1276817","label":"bugzilla.suse.com/1276817","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1276820","label":"bugzilla.suse.com/1276820","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1276824","label":"bugzilla.suse.com/1276824","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1276826","label":"bugzilla.suse.com/1276826","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1276827","label":"bugzilla.suse.com/1276827","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1276828","label":"bugzilla.suse.com/1276828","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1276830","label":"bugzilla.suse.com/1276830","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1276833","label":"bugzilla.suse.com/1276833","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1276835","label":"bugzilla.suse.com/1276835","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1276837","label":"bugzilla.suse.com/1276837","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23184","label":"www.suse.com/security/cve/CVE-2024-23184","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23185","label":"www.suse.com/security/cve/CVE-2024-23185","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59028","label":"www.suse.com/security/cve/CVE-2025-59028","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59031","label":"www.suse.com/security/cve/CVE-2025-59031","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59032","label":"www.suse.com/security/cve/CVE-2025-59032","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27852","label":"www.suse.com/security/cve/CVE-2026-27852","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27855","label":"www.suse.com/security/cve/CVE-2026-27855","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27856","label":"www.suse.com/security/cve/CVE-2026-27856","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27857","label":"www.suse.com/security/cve/CVE-2026-27857","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27858","label":"www.suse.com/security/cve/CVE-2026-27858","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27859","label":"www.suse.com/security/cve/CVE-2026-27859","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33263","label":"www.suse.com/security/cve/CVE-2026-33263","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33603","label":"www.suse.com/security/cve/CVE-2026-33603","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33604","label":"www.suse.com/security/cve/CVE-2026-33604","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33605","label":"www.suse.com/security/cve/CVE-2026-33605","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33606","label":"www.suse.com/security/cve/CVE-2026-33606","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33607","label":"www.suse.com/security/cve/CVE-2026-33607","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40014","label":"www.suse.com/security/cve/CVE-2026-40014","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40015","label":"www.suse.com/security/cve/CVE-2026-40015","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40016","label":"www.suse.com/security/cve/CVE-2026-40016","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40019","label":"www.suse.com/security/cve/CVE-2026-40019","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40020","label":"www.suse.com/security/cve/CVE-2026-40020","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40203","label":"www.suse.com/security/cve/CVE-2026-40203","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40205","label":"www.suse.com/security/cve/CVE-2026-40205","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42006","label":"www.suse.com/security/cve/CVE-2026-42006","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42007","label":"www.suse.com/security/cve/CVE-2026-42007","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42008","label":"www.suse.com/security/cve/CVE-2026-42008","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42391","label":"www.suse.com/security/cve/CVE-2026-42391","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42393","label":"www.suse.com/security/cve/CVE-2026-42393","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42395","label":"www.suse.com/security/cve/CVE-2026-42395","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52681","label":"www.suse.com/security/cve/CVE-2026-52681","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-52687","label":"www.suse.com/security/cve/CVE-2026-52687","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-73208","label":"www.suse.com/security/cve/CVE-2026-73208","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-73209","label":"www.suse.com/security/cve/CVE-2026-73209","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2024-23184","CVE-2024-23185","CVE-2025-59028","CVE-2025-59031","CVE-2025-59032","CVE-2026-27852","CVE-2026-27855","CVE-2026-27856","CVE-2026-27857","CVE-2026-27858","CVE-2026-27859","CVE-2026-33263","CVE-2026-33603","CVE-2026-33604","CVE-2026-33605","CVE-2026-33606","CVE-2026-33607","CVE-2026-40014","CVE-2026-40015","CVE-2026-40016","CVE-2026-40019","CVE-2026-40020","CVE-2026-40203","CVE-2026-40205","CVE-2026-42006","CVE-2026-42007","CVE-2026-42008","CVE-2026-42391","CVE-2026-42393","CVE-2026-42395","CVE-2026-52681","CVE-2026-52687","CVE-2026-73208","CVE-2026-73209"],"downstream":[],"duplicates":[],"related":["CVE-2024-23184","CVE-2024-23185","CVE-2025-59028","CVE-2025-59031","CVE-2025-59032","CVE-2026-27852","CVE-2026-27855","CVE-2026-27856","CVE-2026-27857","CVE-2026-27858","CVE-2026-27859","CVE-2026-33263","CVE-2026-33603","CVE-2026-33604","CVE-2026-33605","CVE-2026-33606","CVE-2026-33607","CVE-2026-40014","CVE-2026-40015","CVE-2026-40016","CVE-2026-40019","CVE-2026-40020","CVE-2026-40203","CVE-2026-40205","CVE-2026-42006","CVE-2026-42007","CVE-2026-42008","CVE-2026-42391","CVE-2026-42393","CVE-2026-42395","CVE-2026-52681","CVE-2026-52687","CVE-2026-73208","CVE-2026-73209"]},"timeline":[{"kind":"published","date":"2026-09-14T07:22:32.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-09-28T18:23:12.561Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T17:48:22.564Z","stale":false,"partial":false}}