PT-2026-95880 · Exim+1 · Exim+1

CVE-2026-94056

·

Published

2026-09-19

·

Updated

2026-09-28

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.100.1
Description When Proxy-Protocol is used with an attacker-controlled proxy, the software allows attackers to read certain uninitialized data from stack memory.
Recommendations Update to version 4.100.1 or later.

Fix

Use of Uninitialized Resource

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-94056
USN-8834-1

Affected Products

Exim
Ubuntu