CVE-2026-94056Disclosure(exim / exim)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch exim exim systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory.

exim CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://lists.exim.org/lurker/message/20260918.121220.0f87338e.en.html

Weakness type (CWE)

CWE-908

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

exim

Threat summary

Patch or workaround signal is available
3 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 3 signals
Disclosure: 2 classified signals
Peaked 2d ago at 1 mentions (2026-09-20); latest day: 1
3 total mentions across 3 days

Affected systems

Vendors

exim

Products

exim

Deep dive

Activity timeline3 mentions / 3d

Signal classification2 categories

Disclosure

266.7%

Patch

133.3%

Referenced assets2 URLs

By indicator

Classification over time

Date	Total	Labels

2026-09-20	1	Disclosure1
2026-09-22	1	Patch1
2026-10-27	1	Disclosure1

Full discourse3 posts

CVE@CVEnew45d
Disclosure
CVE-2026-94056 Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory. https://www.cve.org/CVERecord?id=CVE-2026-94056
Post summary
The tweet discloses CVE‑2026‑94056, noting that Exim versions before 4.100.1 are vulnerable to an information disclosure via uninitialized stack memory when Proxy‑Protocol is used with an attacker‑controlled proxy.
00010924
58.1K followersView on X
Hugo | DevOps | Cybersecurity@HugoValters9d
Disclosure
CVE-2026-94056: Exim before 4.100.1 leaks uninitialized stack memory via attacker-controlled Proxy-Protocol (CVSS 7.5). Patch is still under review, so limit exposure now: #CVE #infosec #Exim https://www.valtersit.com/cve/CVE-2026-94056 #Exim #CVEALERT #CVE #infosec #Linux #XSS #valtersit #snippet #SysAdmin #cybersecurity #devsecops #devops #developer #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #cybersecurityawareness #cybersecuritynews #cybersecuritytips #python #hacker #kali #ubuntu #debian #docker
Post summary
The text announces CVE-2026-94056, providing technical details and the CVSS score for an Exim stack memory leak, while noting that a patch is under review and advising users to limit exposure temporarily.
0000074
1.1K followersView on X
Rıdvan Yağlı@ridvanyagli44d
Patch
🚨 Exim'de 4 güvenlik açığının da yamalandığı 4.100.1 sürümü yayınlandı. • CVE-2026-94054 — Proxy Protocol v1 OOB Write / Heap Corruption — High • CVE-2026-94055 — GnuTLS Use-after-Free — Low • CVE-2026-94056 — Proxy Protocol v2 Stack Memory Leak — High • CVE-2026-94057 — SMTP Smuggling — Medium Mutlaka 4.100.1 sürümüne güncelleme yapın.
Post summary
The text announces that Exim 4.100.1 fixes four CVEs and strongly recommends updating to that version. It provides vulnerability types and severities, but no PoC, exploit tool, active exploitation report, or false-positive claim.
00000324
2.4K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	exim	exim	-	-	-

Explore more

Back to dashboard exim CVEs exim vulnerabilities

What researchers are saying

CVE-2026-94056

Hugo | DevOps | Cybersecurity[verified]@HugoValtersDisclosure

The text announces CVE-2026-94056, providing technical details and the CVSS score for an Exim stack memory leak, while noting that a patch is under review and advising users to limit exposure temporarily.

Rıdvan Yağlı[verified]@ridvanyagliPatch

The text announces that Exim 4.100.1 fixes four CVEs and strongly recommends updating to that version. It provides vulnerability types and severities, but no PoC, exploit tool, active exploitation report, or false-positive claim.

CVE@CVEnewDisclosure

The tweet discloses CVE‑2026‑94056, noting that Exim versions before 4.100.1 are vulnerable to an information disclosure via uninitialized stack memory when Proxy‑Protocol is used with an attacker‑controlled proxy.