Stack Memory Exposure in Exim Mail Transfer Agent from Attacker-Controlled Proxies

CVE-2026-94056

What is CVE-2026-94056?

A vulnerability in Exim versions before 4.100.1 allows attackers to exploit the Proxy-Protocol feature, enabling them to read uninitialized data from the stack memory. This can potentially expose sensitive information and compromise the security of systems utilizing affected versions of Exim. It is crucial for administrators to update to the patched version to mitigate this risk.

References