Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Courier IMAP before 6.0.1 and Courier Mail Server before 2.0.2 allow authenticated IMAP users to crash the imapd process via deeply nested parenthesized SEARCH queries. The SEARCH command parser (alloc_search_key in searchinfo.C) recursively descends on nested parenthesized groups through a mutual recursion chain with alloc_search_andlist() and alloc_search_notkey(), with no depth limit. Courier IMAP has no overall command line length limit, making exploitation trivial. A single IMAP command with ~2500 nested parentheses overflows the 8MB default stack, causing SIGSEGV.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-67194 Courier IMAP before 6.0.1 and Courier Mail Server before 2.0.2 allow authenticated IMAP users to crash the imapd process via deeply nested parenthesized SEARCH querie… https://www.cve.org/CVERecord?id=CVE-2026-67194
Post summary
The post announces that older Courier IMAP and Mail Server versions are vulnerable to a crash via crafted SEARCH queries by authenticated users.
CVE-2026-67194 Denial of Service via Stack Overflow in Courier IMAP Before 6.0.1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-67194 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
The text announces CVE-2026-67194, a Denial-of-Service vulnerability due to a stack overflow in Courier IMAP versions prior to 6.0.1, and provides a link to Vulmon for further details.