Serial number: AV26-944Date: September 21, 2026 As of September 18, 2026, Exim is affected by vulnerabilities in the following product: Exim Prior to 4.100.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Exim Security Release - 4.100.1 Exim Internet Mailer
Rilevate due vulnerabilità con gravità “alta” nel noto server di posta Exim. Tali vulnerabilità, qualora sfruttate, potrebbero consentire ad un utente malintenzionato l'accesso ad informazioni sensibili, la modifica non autorizzata di dati o codice e compromettere la disponibilità sul sistema interessato.
Classification: Important, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 7.5, CVEs: CVE-2026-94054, CVE-2026-94055, CVE-2026-94056, CVE-2026-94057, Summary: Multiple security vulnerabilities have been disclosed in Exim affecting Proxy Protocol processing, TLS handling and SMTP message processing. The vulnerabilities are addressed in Exim 4.100.1. The most significant issue, CVE-2026-94054, is an out-of-bounds write that can be triggered over the network without authentication…