CVE-2026-94057

Exim MTA versions before 4.100.1 are vulnerable to SMTP smuggling : the received message does not match any sent message and instead depends on crafted data sent after a rejection during DATA processing. The vulnerability is reachable over the network without authentication but requires high atta...

CVE-2026-94057

Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing...

CVE-2026-94057

Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing...

CVE-2026-94057

Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing...

CVE-2026-94056

Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory...

CVE-2026-94056

Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory...

CVE-2026-94056

Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory...

CVE-2026-94056

Exim before 4.100.1 is vulnerable to an information disclosure issue when Proxy-Protocol is used with an attacker-controlled proxy. The root cause is the reading of certain uninitialized data from stack memory , allowing a remote attacker to leak sensitive information. The CVSS 3.1 score is 7.5 (...

CVE-2026-94056

Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory...

CVE-2026-94055

Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free...

CVE-2026-94055

Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free...

CVE-2026-94055

Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free...

CVE-2026-94055

Exim versions prior to 4.100.1 are vulnerable to a use-after-free flaw when utilized with GnuTLS under specific non-default TLS settings. This vulnerability could allow a remote attacker to trigger a system crash, resulting in a denial of service (DoS) . To mitigate this risk, users should disabl...

CVE-2026-94055

Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free...

CVE-2026-94054

Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write...

CVE-2026-94054

Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write...

CVE-2026-94054

Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write...

CVE-2026-94054

Exim prior to 4.100.1 is vulnerable to an out-of-bounds write when Proxy-Protocol is used with an attacker-controlled proxy. The vulnerability is network-reachable with no required privileges but has high attack complexity , yielding a CVSS 3.1 base score of 7.0 (HIGH) with impacts of low confide...

CVE-2026-94054

Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write...

PT-2026-95879

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.100.1 Description A use-after-free issue exists when specific non-default TLS settings are utilized in conjunction with GnuTLS. A use-after-free is a memory corruption flaw where an application continues to use a point...