Dovecot: versions, end of support and vulnerabilities
Release branches of Dovecot with the latest version, the end of support and the vulnerabilities that are still open in the latest version.
The NVD lists 69 vulnerabilities for Dovecot, 0 of them actively exploited. Last checked on 03/11/2026.
Release branches
Dovecot 2.4
Latest version: 2.4.5, released on 28/08/2026
End of support: no date known
No known vulnerability open in 2.4.5
Dovecot 2.3
Latest version: 2.3.21.1, released on 14/08/2024
End of support: no date known
17 known vulnerabilities open in 2.3.21.1
Dovecot 2.2
Latest version: 2.2.36.4, released on 28/08/2019
End of support: 24/01/2025
28 known vulnerabilities open in 2.2.36.4
Dovecot 2.1
Latest version: 2.1.16, released on 05/04/2013
End of support: 22/12/2017
36 known vulnerabilities open in 2.1.16
Dovecot 2.0
Latest version: 2.0.15, released on 16/09/2011
End of support: 11/04/2013
38 known vulnerabilities open in 2.0.15
Most recent vulnerabilities of Dovecot
- CVE-2026-42006, CVSS 3.1: 4.3, 12/05/2026
- CVE-2026-40020, CVSS 3.1: 4.3, 12/05/2026
- CVE-2026-40016, CVSS 3.1: 6.5, 12/05/2026
- CVE-2026-33603, CVSS 3.1: 5.3, 12/05/2026
- CVE-2026-27851, CVSS 3.1: 9.1, 12/05/2026
- CVE-2026-27860, CVSS 3.1: 5.3, 27/03/2026
- CVE-2026-27859, CVSS 3.1: 5.3, 27/03/2026
- CVE-2026-27858, CVSS 3.1: 7.5, 27/03/2026
- CVE-2026-27857, CVSS 3.1: 7.5, 27/03/2026
- CVE-2026-27856, CVSS 3.1: 5.9, 27/03/2026
Get notified
Add Dovecot with your version and Erseni Patch writes to you about new versions, vulnerabilities in exactly your version and the end of support.
Already have an account? Log in and add Dovecot