CVE-2026-40204CWE-284broken-access-control

CVE-2026-40204

Low · published August 28, 2026

CVSS v3.1

3.1

EPSS

0%

Percentile

10.8

In the wild

Unconfirmed

What it is

None None None No publicly available exploits are known.

The record

Technical detail

CVSS v3.1: 3.1 · LOW
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0: Not supplied
EPSS: 0.00211 · 10.8th percentile
Weakness: CWE-284 · Improper Access Control
Published: 2026-08-28T16:16Z

References (1)

https://documentation.open-xchange.com/dovecot/security/advisories/csaf/2026/oxdc-adv-2026-0003.json · [email protected]

EPSS history

Timeline

30 AUG 16:17Z
EPSS moved — → 0%
epss
28 AUG 10:12Z
None None None No publicly available exploits are known
cvelistv5