SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-27852

HIGH · CVSS 7.5 EPSS 0.36% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-28 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

This vulnerability affects email systems that process messages with excessively large headers, potentially leading to denial of service by exhausting memory resources when parsing such messages. Users who receive crafted emails with numerous email addresses or MIME parameters may experience crashes in their email clients, particularly when accessing messages via IMAP. Organizations relying on email services should prioritize addressing this issue to prevent service disruptions for their users.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-27852
Severity
HIGH
CVSS
7.5
EPSS
0.36%

Original NVD Description

An attacker that can send mail to a user can craft a message whose headers contain a very large number of email addresses or MIME parameters, which causes excessive memory usage when the message is later parsed. The message is still delivered, but reading it over IMAP can exhaust the memory limit of the process and terminate it, causing denial of service for the affected user. Update to non-vulnerable version. No publicly available exploits are known.