Contact us
Vulnerability lookup

CVE-2025-59032

high CVSS 7.5 EPSS 0.7%

ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response. This can be used to crash ManageSieve service repeatedly, making it unavailable for other users. Control access to ManageSieve port, or disable the service if it's not needed. Alternatively upgrade to a fixed version. No publicly available exploits are known.

Versions it affects

Software versions checked with the free lookup that CVE-2025-59032 applies to, and the release that fixes it where the sources name one.

At a glance

Severity
High
CVSS base score
7.5 out of 10
Known exploited
Not in CISA's catalogue of exploited vulnerabilities
EPSS
0.7% probability of exploitation in the next 30 days, higher than 52% of scored vulnerabilities
Weakness
CWE-20
Published
2026-03-27

Is this running somewhere in your estate?

The Vulnerability Reporter inventories every machine and tells you when an advisory like this one applies to you.