{"action":"Upgrade dovecot to 1:2.3.19.1+dfsg1-2.1+deb12u7 or later.","affected":[{"fixed":"1:2.3.19.1+dfsg1-2.1+deb12u7","introduced":"0"}],"component":"dovecot","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["1:2.3.19.1+dfsg1-2.1+deb12u7"],"id":"tcs_01M5NRQZ0C27123XNPSSC37HP3","modified_at":"2026-10-31T16:04:23.040903185Z","published_at":"2026-08-28T12:16:27.990Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-33607","https://security-tracker.debian.org/tracker/CVE-2026-33607"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-33607","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-33607"}],"summary":"An attacker that has valid credentials can use IMAP LIST command to consume CPU. This can cause degradation or denial of service for IMAP. Monitor system for abnormal CPU usage and kill the offending"}