Hosts vulnerable to CVE-2026-33603

CVE-2026-33603 — severity medium, CVSS 6.8 — 4 affected hosts indexed by QROS Explore.

About CVE-2026-33603

Attacker can use a specially crafted base64 exchange between Dovecot and Client to fake SCRAM TLS channel binding. This requires that the attacker is able to position itself between Dovecot and the client connection. If successful, the attacker can eavesdrop communications between Dovecot and client

Showing 4 of 4 hosts, ranked by risk score.

mail.simhost.at (23.88.20.182)

Germany · Falkenstein

8 open ports · 32 CVE · risk 98/100 · critical

http, imap, pop3, smtp

1024.pl (5.9.174.104)

Germany · Falkenstein

14 open ports · 55 CVE · risk 98/100 · critical

ftp, http, imap, pop3, smtp, ssh

vps-cac4f4e3.vps.ovh.net (51.75.200.140)

France · Roubaix

12 open ports · 60 CVE · risk 98/100 · critical