exim

Disclosed vulnerabilities where the NVD names exim as an affected vendor, highest CVSS first.

1. HIGH 7.5CVE-2026-940562026-09-19

   Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory.

   exim

   AI risk analysis on Exploit-DB.ai →

2. HIGH 7CVE-2026-940542026-09-19

   Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.

   exim

   AI risk analysis on Exploit-DB.ai →

3. MEDIUM 4CVE-2026-940572026-09-19

   Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing.

   exim

   AI risk analysis on Exploit-DB.ai →

4. LOW 3.7CVE-2026-940552026-09-19

   Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.

   exim

   AI risk analysis on Exploit-DB.ai →