poslední zpráva
SPOJENO AI EPSS < 0.01 (nejvyšší)
Exim — Multiple Mail Server Vulnerabilities
Classification: Important, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 7.5, CVEs: CVE-2026-94054, CVE-2026-94055, CVE-2026-94056, CVE-2026-94057, Summary: Multiple security vulnerabilities have been disclosed in Exim affecting Proxy Protocol processing, TLS handling and SMTP message processing. The vulnerabilities are addressed in Exim 4.100.1. The most significant issue, CVE-2026-94054, is an out-of-bounds write that can be triggered over the network without authentication…
Událost se už nepřepočítává, tohle je stav k 22. 9. 2026. Novější zprávy o téže věci najdete ve výpisu všech zpráv.
Exim CA IT FI
CVE v události 4
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-94054 | 7.0 3.1 · mitre | – | < 0.01 |
| CVE-2026-94055 | 3.7 3.1 · mitre | – | < 0.01 |
| CVE-2026-94056 | 7.5 3.1 · mitre | – | < 0.01 |
| CVE-2026-94057 | 4.0 3.1 · mitre | – | < 0.01 |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 7.5.
Jak se o tom psalo 3
-
· Cyber Centre Kanada CA
Exim security advisory (AV26-944)
Serial number: AV26-944Date: September 21, 2026 As of September 18, 2026, Exim is affected by vulnerabilities in the following product: Exim Prior to 4.100.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Exim Security Release - 4.100.1 Exim Internet Mailer
-
· CSIRT Itálie (ACN) IT
Rilevate vulnerabilità in Exim
Rilevate due vulnerabilità con gravità “alta” nel noto server di posta Exim. Tali vulnerabilità, qualora sfruttate, potrebbero consentire ad un utente malintenzionato l'accesso ad informazioni sensibili, la modifica non autorizzata di dati o codice e compromettere la disponibilità sul sistema interessato.
-
· zachyceno · NCSC-FI FI nadpis události
Exim — Multiple Mail Server Vulnerabilities
Classification: Important, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 7.5, CVEs: CVE-2026-94054, CVE-2026-94055, CVE-2026-94056, CVE-2026-94057, Summary: Multiple security vulnerabilities have been disclosed in Exim affecting Proxy Protocol processing, TLS handling and SMTP message processing. The vulnerabilities are addressed in Exim 4.100.1. The most significant issue, CVE-2026-94054, is an out-of-bounds write that can be triggered over the network without authentication…