CVE-2026-33607

A flaw was found in Dovecot. An authenticated attacker can exploit a vulnerability in the IMAP LIST command to consume excessive CPU resources. This can lead to a degradation of service or a complete denial of service (DoS) for the IMAP server, impacting the availability of email services.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, restrict access to the Dovecot IMAP service to trusted networks or localhost using firewall rules or Dovecot's configuration. Additionally, implement system monitoring for abnormal CPU utilization by Dovecot processes to detect and respond to potential exploitation attempts. If network configuration changes are applied, a restart of the Dovecot service may be required.