#dovecot

CVE-2026-42007: Use-After-Free in Dovecot via Sieve editheader Extension

An attacker with valid credentials can use a Sieve script with the editheader extension to trigger a use-after-free and write memory contents beyond the intended buffer into the delivered mail...