CVE-2026-73209: Medium severity vulnerability
Published Aug 28, 2026
·Updated
An attacker that has valid credentials can send crafted compressed data that causes the affected process to exhaust its stack and crash. The affected process is terminated, which can cause degradation or denial of service for IMAP. Update to non-vulnerable version. No publicly available exploits are known.
Event History
Aug 28, 2026
CVE Published
via MITRE·10:12 AM
Data Sourced
via MITRE·10:12 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The attacker needs valid credentials and must be able to send crafted compressed data to the affected process. The attack can be performed over the network without user interaction.
2
What is the operational impact of a successful attack?
Successful exploitation exhausts the affected process's stack and crashes it. This terminates the process and can degrade or deny IMAP service.
3
What should administrators do to remediate the issue?
Update to a non-vulnerable version.
4
Are public exploits available?
No publicly available exploits are known.