CVE-2026-0394 — When dovecot has been configured to use per-domain passwd files, and they are placed one path component above /etc, or slash has been added to allowed characters, path traversal can happen if the doma — CVE Database · The Intelligence Room