CVE-2025-59032
ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response. This can be used to crash ManageSieve service repeatedly, making it unavailable for other users. Control access to ManageSieve port, or disable the service if it's not needed. Alternatively upgrade to a fixed version. No publicly available exploits are known.
Versions it affects
Software versions checked with the free lookup that CVE-2025-59032 applies to, and the release that fixes it where the sources name one.
At a glance
- Severity
- High
- CVSS base score
- 7.5 out of 10
- Known exploited
- Not in CISA's catalogue of exploited vulnerabilities
- EPSS
- 0.7% probability of exploitation in the next 30 days, higher than 52% of scored vulnerabilities
- Weakness
- CWE-20
- Published
- 2026-03-27
Is this running somewhere in your estate?
The Vulnerability Reporter inventories every machine and tells you when an advisory like this one applies to you.