<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: exim</title><description>Every new CVE for exim.</description><link>https://agentprime.io/</link><item><title>CVE-2026-94057: CRLF injection in Exim</title><link>https://agentprime.io/advisories/CVE-2026-94057/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-94057/</guid><description>CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 19 Sep 2026 22:55:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-94056: Use of uninitialized resource in Exim</title><link>https://agentprime.io/advisories/CVE-2026-94056/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-94056/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 19 Sep 2026 22:52:43 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-94055: Use after free in Exim</title><link>https://agentprime.io/advisories/CVE-2026-94055/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-94055/</guid><description>CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 19 Sep 2026 22:48:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-94054: Out-of-bounds write in Exim</title><link>https://agentprime.io/advisories/CVE-2026-94054/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-94054/</guid><description>CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 19 Sep 2026 22:46:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-66141: Exim: Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe…</title><link>https://agentprime.io/advisories/CVE-2026-66141/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-66141/</guid><description>CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 24 Jul 2026 04:37:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-66140: Path traversal in Exim</title><link>https://agentprime.io/advisories/CVE-2026-66140/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-66140/</guid><description>CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 24 Jul 2026 04:32:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-48840: Exim: Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads…</title><link>https://agentprime.io/advisories/CVE-2026-48840/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-48840/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 30 May 2026 01:50:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-45185: Use after free in Exim</title><link>https://agentprime.io/advisories/CVE-2026-45185/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-45185/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 12 May 2026 00:00:00 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-40687: Exim: In Exim before 4.99.2, when the SPA authentication driver is used with an adversarial SPA…</title><link>https://agentprime.io/advisories/CVE-2026-40687/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-40687/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 30 Apr 2026 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-40686: Out-of-bounds read in Exim</title><link>https://agentprime.io/advisories/CVE-2026-40686/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-40686/</guid><description>CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 30 Apr 2026 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-40685: Exim: In Exim before 4.99.2, when JSON lookup is enabled…</title><link>https://agentprime.io/advisories/CVE-2026-40685/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-40685/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 30 Apr 2026 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-40684: Exim: In Exim before 4.99.2, on systems using musl libc (not glibc)…</title><link>https://agentprime.io/advisories/CVE-2026-40684/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-40684/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 30 Apr 2026 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-67896: Heap-based buffer overflow in Exim</title><link>https://agentprime.io/advisories/CVE-2025-67896/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-67896/</guid><description>CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 14 Dec 2025 04:00:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-30232: Use after free in Exim</title><link>https://agentprime.io/advisories/CVE-2025-30232/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-30232/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 27 Mar 2025 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-26794: SQL injection in Exim</title><link>https://agentprime.io/advisories/CVE-2025-26794/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-26794/</guid><description>CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.78 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 21 Feb 2025 00:00:00 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2023-42119: Exim dnsdb Out-Of-Bounds Read Information Disclosure Vulnerability</title><link>https://agentprime.io/advisories/CVE-2023-42119/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-42119/</guid><description>CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 03 May 2024 02:13:26 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-42117: Exim Improper Neutralization of Special Elements Remote Code Execution Vulnerability</title><link>https://agentprime.io/advisories/CVE-2023-42117/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-42117/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 03 May 2024 02:13:25 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-42116: Exim SMTP Challenge Stack-based Buffer Overflow Remote Code Execution Vulnerability</title><link>https://agentprime.io/advisories/CVE-2023-42116/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-42116/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 03 May 2024 02:13:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-42115: Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability</title><link>https://agentprime.io/advisories/CVE-2023-42115/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-42115/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.12 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 03 May 2024 02:13:23 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2023-42114: Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability</title><link>https://agentprime.io/advisories/CVE-2023-42114/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-42114/</guid><description>CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 03 May 2024 02:13:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-3620: Exim DMARC dmarc.c dmarc_dns_lookup use after free</title><link>https://agentprime.io/advisories/CVE-2022-3620/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-3620/</guid><description>CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 20 Oct 2022 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-3559: Exim Regex use after free</title><link>https://agentprime.io/advisories/CVE-2022-3559/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-3559/</guid><description>CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 17 Oct 2022 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-10149: OS command injection in exim</title><link>https://agentprime.io/advisories/CVE-2019-10149/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-10149/</guid><description>CVSS 9.0 (Critical). Critical: In CISA’s KEV catalogue since 10 Jan 2022: it is known to be exploited. CVSS score 9.0: 9.0 or more. CVSS score 9.0 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 05 Jun 2019 00:00:00 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item></channel></rss>