Is CVE-2026-27859 actively exploited?

No active exploitation of CVE-2026-27859 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-27859 be exploited remotely?

Yes. CVE-2026-27859 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2026-27859?

CVE-2026-27859 has a CVSS score of 5.3 (MEDIUM).

HOME VULNERABILITIESCVE-2026-27859

MEDIUM

CVE-2026-27859

CWE-400Published: March 27, 2026· Updated: Mar 30, 2026

5.3

CVSS v3.1

EPSS:0.04%probability of exploitation in 30 daysPercentile:11.7th

Official Description

A mail message containing excessive amount of RFC 2231 MIME parameters causes LMTP to use too much CPU. A suitably formatted mail message causes mail delivery process to consume large amounts of CPU time. Use MTA capabilities to limit RFC 2231 MIME parameters in mail messages, or upgrade to fixed version where the processing is limited. No publicly available exploits are known.

NVD Source

Technical Analysis

CVE-2026-27859 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.