Skip to content
Threat Feed
Subscribe

Vendor

Exim

5 briefs RSS
critical advisory

Critical Remote Code Execution Vulnerability in Exim MTA

Exim is affected by a critical vulnerability (CVE-2024-39929) that allows a remote, unauthenticated attacker to execute arbitrary code via a logic error in header field processing.

PoC Exim vulnerability remote-code-execution mail-server
1t 1c updated
high advisory

Exim Vulnerability Allows SQL Injection

A vulnerability in Exim allows an attacker to perform a SQL injection attack, potentially leading to unauthorized data access or modification.

Exim sql-injection vulnerability
2r 1t
critical advisory

Exim Mail Transfer Agent User-After-Free Remote Code Execution Vulnerability (CVE-2026-45185)

CVE-2026-45185, a user-after-free vulnerability in Exim versions 4.97 through 4.99.2, allows an unauthenticated remote attacker to execute arbitrary code by sending crafted SMTP traffic with BDAT chunking during TLS shutdown.

Exim rce vulnerability cve-2026-45185 user-after-free gnutls
2r 1t 1c
critical threat

Exim Internet Mailer Vulnerability (Versions 4.97 to 4.99.2)

A critical vulnerability exists in Exim Internet Mailer versions 4.97 to 4.99.2, requiring users and administrators to apply necessary updates.

Exim Internet Mailer exim vulnerability rce
2r 1t
high advisory

Multiple Vulnerabilities in Exim Mail Transfer Agent

Multiple vulnerabilities in Exim versions prior to 4.99.2 allow an attacker to cause a remote denial of service, a breach of data confidentiality, and an unspecified security problem.

Exim vulnerability denial-of-service information-disclosure
3r 3t