Tech

CVE-2026-24031 Analysis — Dovecot SQL-Based Authentication Bypass (an auth_username_chars Regression)

🌍 Dev.to

September 2, 2026

1. Overview Item Detail CVE ID CVE-2026-24031 Component Dovecot Core (SQL passdb/userdb authentication) Vulnerability class CWE-89 (SQL Injection) CVSS 3.1 7.7 (High) — AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L Affected versions OX Dovecot CE core 2.4.0–2.4.2, OX Dovecot Pro core 3.1.0–3.1.3 Fixed in CE core 2.4.3 , Pro core 3.1.4 Internal tracking ID DOV-8781 Discovery / disclosure 2026-02-23 / 2026-03-27 Di...

Read the full discussion on Dev.to This article was aggregated from Dev.to. Click to join the conversation.

View on Dev.to

Related Trends in Tech