CVE-2025-26794

🗓️ 21 Feb 2025 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 130 Views

Exim 4.98 allows remote SQL injection due to SQLite hints and ETRN serialization issues.

Reporter	Title	Published	Views	Family All 48
FreeBSD	exim -- SQL injection	21 Feb 202500:00	–	freebsd
0day.today	Exim 4.98 SQL Injection Vulnerability	24 Feb 202500:00	–	zdt
AlpineLinux	CVE-2025-26794	21 Feb 202513:15	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в exim4	20 May 202605:53	–	astralinux
Information Security Automation	April Linux Patch Wednesday	30 Apr 202523:34	–	avleonov
Circl	CVE-2025-26794	19 Feb 202522:30	–	circl
CNNVD	Exim 安全漏洞	21 Feb 202500:00	–	cnnvd
Cvelist	CVE-2025-26794	21 Feb 202500:00	–	cvelist
Debian CVE	CVE-2025-26794	21 Feb 202500:00	–	debiancve
Tenable Nessus	Exim < 4.98.1 SQL injection	21 Feb 202500:00	–	nessus

NVD

Vulners

CNA

Node

exim eximRange4.98–4.98.1

[
  {
    "defaultStatus": "unaffected",
    "product": "Exim",
    "vendor": "Exim",
    "versions": [
      {
        "lessThan": "4.98.1",
        "status": "affected",
        "version": "4.98",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
exim	www.exim.org/static/doc/security/CVE-2025-26794.txt
github	www.github.com/NixOS/nixpkgs/pull/383926
github	www.github.com/openbsd/ports/commit/584d2c49addce9ca0ae67882cc16969104d7f82d
exim	www.exim.org/static/doc/security/EXIM-Security-2025-12-09.1/report.txt
bugzilla	www.bugzilla.suse.com/show_bug.cgi
github	www.github.com/Exim/exim/wiki/EximSecurity
code	www.code.exim.org/exim/exim/commit/bfe32b5c6ea033736a26da8421513206db9fe305
exim	www.exim.org/
openwall	www.openwall.com/lists/oss-security/2025/02/21/5
openwall	www.openwall.com/lists/oss-security/2025/02/19/1

18 Dec 2025 19:16Current

8.2High risk

Vulners AI Score8.2

CVSS 3.17.5 - 9.8

EPSS0.77997

SSVC

CWE-89

cve-2025-26794 exim version sql injection vulnerabilities