CVE-2026-40020

Attacker can use the IMAP SETACL command to inject the anyone permission to user's dovecot-acl file even if imap_acl_allow_anyone=no. This causes folders to be spammed to all users. The impact is limited to being able to spam folders to other users, no unexpected access is gained. Install to fixed version. No publicly available exploits are known.

• CWE-284

• https://documentation.open-xchange.com/dovecot/security/advisories/csaf/2026/oxdc-adv-2026-0002.jsonVendor Advisory

Published

May 12, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-4001The Woocommerce Custom Product Addons Pro plugin for WordPre…9.8
• CVE-2026-40010Missing invocation of Servlet http web request method change…9.1
• CVE-2026-40011An attacker sending a large number of crafted DNS queries mi…3.7
• CVE-2026-40012ECS zero scoped answers are stored in the packet cache while…5.3
• CVE-2026-40016Attacker can upload a malicious Sieve script over ManageSiev…6.5
• CVE-2026-4002The Petje.af plugin for WordPress is vulnerable to Cross-Sit…4.3
• CVE-2026-40021Apache Log4net's XmlLayout https://logging.apache.org/log4n…5.3
• CVE-2026-40022When authentication is enabled on the Apache Camel embedded …8.2
• CVE-2026-40023Apache Log4cxx's XMLLayout https://logging.apache.org/log4c…5.3
• CVE-2026-40024The Sleuth Kit through 4.14.0 contains a path traversal vuln…7.1
• CVE-2026-40025The Sleuth Kit through 4.14.0 contains an out-of-bounds read…6.1
• CVE-2026-40026The Sleuth Kit through 4.14.0 contains an out-of-bounds read…7.1