Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Leaderboard
CNA Report Cards
Vendor Directory
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Careers
Contact
Book a demo

Get Started

Sign up
Log in

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in Start free

Home
Vendors
Openxchange
Ox Dovecot Ce

open-xchange OX Dovecot CE Vulnerabilities: CVEs, CISA KEV & Security Advisories

25 CVEs

open-xchange OX Dovecot CE Vulnerabilities

CVE security advisories and vulnerability history for OX Dovecot CE by open-xchange.

25

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

5.5

Avg CVSS

2026–2026

Last updated August 28, 2026

Overview

open-xchange OX Dovecot CE has 25 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 5.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting open-xchange OX Dovecot CE, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of open-xchange OX Dovecot CE's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High5

Medium15

Low4

In CISA’s Known Exploited Vulnerabilities catalog

0

None of open-xchange OX Dovecot CE's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No open-xchange OX Dovecot CE CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every open-xchange OX Dovecot CE version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

2.3.0 <= v < 2.4.519 CVEs
2.3.11 <= v < 2.4.51 CVE
2.3.11.2 <= v < 2.4.51 CVE
2.3.13 <= v < 2.4.51 CVE
2.3.15 <= v < 2.4.51 CVE
2.3.4 <= v < 2.4.51 CVE
2.4.3 <= v < 2.4.51 CVE

Fixed in

2.4.525 CVEs

Find a version

25 CVEs

Sort

Medium vulnerability · 2026-08-28
CVE-2026-73209
Patch
CWE-674
Medium · CVSS 6.5
EPSS 0.3% (25th pct)2026-08-28
High vulnerability · 2026-08-28
CVE-2026-73208
Patch
CWE-287
High · CVSS 7.4
EPSS 0.3% (17th pct)2026-08-28
Medium vulnerability · 2026-08-28
CVE-2026-52687
Patch
CWE-400
Medium · CVSS 6.5
EPSS 0.3% (25th pct)2026-08-28
Low vulnerability · 2026-08-28
CVE-2026-52681
Patch
CWE-1050
Low · CVSS 3.1
EPSS 0.3% (17th pct)2026-08-28
Medium vulnerability · 2026-08-28
CVE-2026-42395
Patch
CWE-400
Medium · CVSS 4.3
EPSS 0.2% (8th pct)2026-08-28
Low vulnerability · 2026-08-28
CVE-2026-42393
Patch
CWE-200
Low · CVSS 3.1
EPSS 0.1% (4th pct)2026-08-28
Medium vulnerability · 2026-08-28
CVE-2026-42392
Patch
CWE-200
Medium · CVSS 4.3
EPSS 0.2% (13th pct)2026-08-28
High vulnerability · 2026-08-28
CVE-2026-42391
Patch
CWE-400
High · CVSS 7.5
EPSS 0.4% (31th pct)2026-08-28
Medium vulnerability · 2026-08-28
CVE-2026-42008
Patch
CWE-287
Medium · CVSS 4.3
EPSS 0.2% (9th pct)2026-08-28
Critical vulnerability · 2026-08-28
CVE-2026-42007
Patch
CWE-416
Critical · CVSS 9.1
EPSS 0.3% (21th pct)2026-08-28
Medium vulnerability · 2026-08-28
CVE-2026-40205
Patch
CWE-287
Medium · CVSS 5.9
EPSS 0.2% (8th pct)2026-08-28
Low vulnerability · 2026-08-28
CVE-2026-40204
Patch
CWE-284
Low · CVSS 3.1
EPSS 0.2% (8th pct)2026-08-28
Low vulnerability · 2026-08-28
CVE-2026-40203
Patch
CWE-200
Low · CVSS 3.7
EPSS 0.2% (12th pct)2026-08-28
Medium vulnerability · 2026-08-28
CVE-2026-40019
Patch
CWE-400
Medium · CVSS 5.9
EPSS 0.3% (24th pct)2026-08-28
High vulnerability · 2026-08-28
CVE-2026-40018
Patch
CWE-89
High · CVSS 7.4
EPSS 0.3% (19th pct)2026-08-28
Medium vulnerability · 2026-08-28
CVE-2026-40017
Patch
CWE-400
Medium · CVSS 6.5
EPSS 0.3% (19th pct)2026-08-28
Medium vulnerability · 2026-08-28
CVE-2026-40015
Patch
CWE-125
Medium · CVSS 4.3
EPSS 0.3% (21th pct)2026-08-28
Medium vulnerability · 2026-08-28
CVE-2026-40014
Patch
CWE-400
Medium · CVSS 6.5
EPSS 0.3% (19th pct)2026-08-28
Medium vulnerability · 2026-08-28
CVE-2026-40013
Patch
CWE-124
Medium · CVSS 4.3
EPSS 0.5% (38th pct)2026-08-28
Medium vulnerability · 2026-08-28
CVE-2026-33607
Patch
CWE-400
Medium · CVSS 4.3
EPSS 0.3% (21th pct)2026-08-28
Medium vulnerability · 2026-08-28
CVE-2026-33606
Patch
CWE-93
Medium · CVSS 4.8
EPSS 0.2% (10th pct)2026-08-28
High vulnerability · 2026-08-28
CVE-2026-33605
Patch
CWE-400
High · CVSS 7.5
EPSS 0.4% (31th pct)2026-08-28
Medium vulnerability · 2026-08-28
CVE-2026-33604
Patch
CWE-655
Medium · CVSS 5.9
EPSS 0.3% (19th pct)2026-08-28
Medium vulnerability · 2026-08-28
CVE-2026-33263
Patch
CWE-403
Medium · CVSS 4.3
EPSS 0.3% (21th pct)2026-08-28
High vulnerability · 2026-08-28
CVE-2026-27852
Patch
CWE-400
High · CVSS 7.5
EPSS 0.4% (29th pct)2026-08-28

Common weakness types

The CWE weakness categories most often found in open-xchange OX Dovecot CE CVEs. Follow any weakness for its full explanation.

CWE-400Uncontrolled Resource Consumption9 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-287Improper Authentication3 CVEs
CWE-284Improper Access Control1 CVE
CWE-403Exposure of File Descriptor to Unintended Control Sphere ('File Descriptor Leak')1 CVE
CWE-416Use After Free1 CVE
CWE-655Insufficient Psychological Acceptability1 CVE
CWE-674Uncontrolled Recursion1 CVE

Other open-xchange products

Browse vulnerabilities for other products by open-xchange.

open-xchange appsuite157 CVEs OX App Suite66 CVEs appsuite-frontend44 CVEs OX Dovecot Pro44 CVEs dovecot16 CVEs open-xchange appsuite backend14 CVEs open-xchange server13 CVEs ox guard11 CVEs

All open-xchange vulnerabilities

Frequently asked questions

Common questions about open-xchange OX Dovecot CE vulnerabilities.

How many CVEs does open-xchange OX Dovecot CE have?: open-xchange OX Dovecot CE has 25 published CVE records since 2026.
How many open-xchange OX Dovecot CE CVEs are in CISA KEV?: None of open-xchange OX Dovecot CE's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for open-xchange OX Dovecot CE vulnerabilities?: No open-xchange OX Dovecot CE CVEs currently have a tracked public exploit in this dataset.
Which versions of open-xchange OX Dovecot CE are affected?: 8 distinct open-xchange OX Dovecot CE versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in open-xchange OX Dovecot CE CVEs?: open-xchange OX Dovecot CE's CVEs most often map to these CWE weakness types: CWE-400 (Uncontrolled Resource Consumption), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-287 (Improper Authentication), CWE-284 (Improper Access Control).
How many critical open-xchange OX Dovecot CE vulnerabilities are there?: open-xchange OX Dovecot CE has 1 critical and 5 high-severity CVEs.
What is the average severity of open-xchange OX Dovecot CE CVEs?: The average CVSS base score across open-xchange OX Dovecot CE's scored CVEs is 5.5.

References

All open-xchange vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track open-xchange OX Dovecot CE vulnerabilities

Monitor new open-xchange OX Dovecot CE vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Other products
FAQ
References