CVE-2026-40204

Deferred Deferred - Pending Action

BaseFortify

Publication date: 2026-08-28

Last updated on: 2026-09-03

Assigner: Open-Xchange

Description

None None None No publicly available exploits are known.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-28

Last Modified

2026-09-03

Generated

2026-10-08

AI Q&A

2026-08-28

EPSS Evaluated

2026-10-06

NVD

CVE-2026-40204

EUVD

EUVD-2026-67670

Affected Vendors & Products

Vendor	Product	Version / Range
Open-Xchange	GmbH	OX Dovecot Pro 2.3.0
Open-Xchange	GmbH	OX Dovecot Pro 3.0.0
Open-Xchange	GmbH	OX Dovecot Pro 3.1.0
Open-Xchange	GmbH	OX Dovecot CE 2.3.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This vulnerability has a CVSS v3.1 base score of 3.1, indicating low severity. It requires low privileges and has no user interaction requirement. The attack vector is network-based, and it may allow unauthorized modification of data (integrity impact labeled as low). No known public exploits exist for this issue.

Detection Guidance

No specific detection methods or commands are provided for this CVE. The vulnerability has no known public exploits and limited details available.

Impact Analysis

The impact is limited due to the low CVSS score. An attacker with low privileges could potentially alter some data without authorization, but the overall risk is minimal. No significant disruption or data loss is expected.

Compliance Impact

The provided CVE data does not specify how this vulnerability impacts compliance with standards like GDPR or HIPAA. The vulnerability has a low CVSS score (3.1) and no known exploits, suggesting limited impact on compliance requirements.

Mitigation Strategies

Since no exploits are known and CVSS score is low (3.1), focus on monitoring for unusual activity. Apply vendor patches if available. Limit user privileges to reduce potential impact.

Hi! I’m here to help you understand CVE-2026-40204. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70