CVE-2023-26432

CVE-2023-26432 is a denial-of-service vulnerability affecting Open-Xchange AppSuite Backend. It arises from insufficient size limitations when processing SMTP server "capabilities" responses during external mail account setup. An attacker controlling a malicious SMTP service could exploit this to cause excessive resource consumption and service unavailability. The vulnerability has a CVSS score of 4.3 (Medium), indicating a low impact on availability (A:L) and requiring low privileges (PR:L) to exploit over the network (AV:N). There is no known active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.