CVE-2025-26794

🗓️ 21 Feb 2025 13:15:11Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 22 Views

Exim 4.98 allows remote SQL injection before version 4.98.1 with SQLite hints and ETRN serialization.

Reporter	Title	Published	Views	Family All 49
FreeBSD	exim -- SQL injection	21 Feb 202500:00	–	freebsd
0day.today	Exim 4.98 SQL Injection Vulnerability	24 Feb 202500:00	–	zdt
AlpineLinux	CVE-2025-26794	21 Feb 202513:15	–	alpinelinux
AstraLinux	Astra Linux – Vulnerability in exim4	3 May 202623:59	–	astralinux
Information Security Automation	April Linux Patch Wednesday	30 Apr 202523:34	–	avleonov
BDU FSTEC	Vulnerabilities include SQLite hint functions and ETRN serialization of the Exim mail server, which allows attackers to cause service interruptions.	24 Feb 202500:00	–	bdu_fstec
Circl	CVE-2025-26794	19 Feb 202522:30	–	circl
CNNVD	Exim 安全漏洞	21 Feb 202500:00	–	cnnvd
CVE	CVE-2025-26794	21 Feb 202500:00	–	cve
Cvelist	CVE-2025-26794	21 Feb 202500:00	–	cvelist

NVD

Node

exim eximRange4.98–4.98.1

Source	Link
github	www.github.com/NixOS/nixpkgs/pull/383926
github	www.github.com/Exim/exim/wiki/EximSecurity
openwall	www.openwall.com/lists/oss-security/2025/02/21/4
exim	www.exim.org/static/doc/security/EXIM-Security-2025-12-09.1/report.txt
github	www.github.com/openbsd/ports/commit/584d2c49addce9ca0ae67882cc16969104d7f82d
exim	www.exim.org/static/doc/security/CVE-2025-26794.txt
openwall	www.openwall.com/lists/oss-security/2025/02/19/1
bugzilla	www.bugzilla.suse.com/show_bug.cgi
code	www.code.exim.org/exim/exim/commit/bfe32b5c6ea033736a26da8421513206db9fe305
openwall	www.openwall.com/lists/oss-security/2025/02/21/5

17 Jun 2026 09:02Current

CVSS 3.17.5 - 9.8

EPSS0.75782

cve-2025-26794 exim version vulnerability remote sql injection sqlite hints etrn serialization.