Out-of-Bounds Write Vulnerability in Exim Mail Server
CVE-2026-94054

7HIGH

Key Information:

Vendor

Exim

Status
Exim
Vendor
CVE Published:
19 September 2026

What is CVE-2026-94054?

The Exim Mail Server, prior to version 4.100.1, is vulnerable to out-of-bounds write when the Proxy-Protocol feature is exploited by an attacker-controlled proxy. This flaw can lead to potential manipulation of memory, posing risks such as data corruption or unexpected behavior within the application.

Affected Version(s)

Exim 4.83 < 4.100.1

References

https://lists.exim.org/lurker/message/20260918.121220.0f8...

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.