Weakness (CWE)

CWE-403: Exposure of File Descriptor to Unintended Control Sphere

Base Draft

A process does not close sensitive file descriptors before invoking a child process, which allows the child to perform unauthorized I/O operations using those descriptors.

Source: MITRE CWE-403

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 4.3

CVE-2026-33263

When mail_max_userip_connections is set (default 10) and reached, submission-login can crash with epoll() panic caused …

Open-Xchange OX Dovecot Pro OX Dovecot CE dovecot Debian Ubuntu Alpine

Aug 28, 2026

CWE-403: Exposure of File Descriptor to Unintended Control Sphere

When mail_max_userip_connections is set (default 10) and reached, submission-login can crash with epoll() panic caused …