CVE-2026-94057

4 MEDIUM

Published 2026-09-19 · Updated 2026-09-24

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N

Weaknesses

CWE-93

Vendors

exim

Products

exim

References

https://lists.exim.org/lurker/message/20260918.121220.0f87338e.en.html Vendor Advisory

Data: NVD (public domain). Analysis: local $0 model. Defensive use only.