CVE-2026-94057Patch(exim / exim)

LOWCVSS 5.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch exim exim systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing.

exim CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://lists.exim.org/lurker/message/20260918.121220.0f87338e.en.html

Weakness type (CWE)

CWE-93

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

exim

Threat summary

Patch or workaround signal is available
4 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 3 signals
Technical details provided in 4 signals
Disclosure: 1 classified signal
Peaked 2d ago at 2 mentions (2026-09-20); latest day: 1
4 total mentions across 3 days

Affected systems

Vendors

exim

Products

exim

Deep dive

Activity timeline4 mentions / 3d

Signal classification2 categories

Patch

375.0%

Disclosure

125.0%

Referenced assets2 URLs

By indicator

Classification over time

Date	Total	Labels

2026-09-20	2	Disclosure1Patch1
2026-09-22	1	Patch1
2026-10-28	1	Patch1

Full discourse4 posts

CVE@CVEnew46d
Disclosure
CVE-2026-94057 Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection du… https://www.cve.org/CVERecord?id=CVE-2026-94057
Post summary
The tweet announces CVE-2026-94057 in Exim, detailing an SMTP smuggling vulnerability for versions before 4.100.1, but contains no mentions of active exploitation, functional PoC code, named exploits, or specific remediation patches.
000101.2K
58.1K followersView on X
Hugo | DevOps | Cybersecurity@HugoValters8d
Patch
CVE-2026-94057: Exim SMTP smuggling lets crafted data after a DATA rejection spoof messages. CVSS 4. Patch under review, so update immediately. #CVE #infosec https://www.valtersit.com/cve/CVE-2026-94057 #Exim #CVEALERT #CVE #infosec #Linux #XSS #valtersit #snippet #SysAdmin #cybersecurity #devsecops #devops #developer #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #cybersecurityawareness #cybersecuritynews #cybersecuritytips #python #hacker #kali #ubuntu #debian #docker
Post summary
The post discloses CVE-2026-94057, an Exim SMTP smuggling flaw with CVSS 4 that enables message spoofing, and emphasizes an immediate update while noting a patch is under review.
0000032
1.1K followersView on X
Rıdvan Yağlı@ridvanyagli44d
Patch
🚨 Exim'de 4 güvenlik açığının da yamalandığı 4.100.1 sürümü yayınlandı. • CVE-2026-94054 — Proxy Protocol v1 OOB Write / Heap Corruption — High • CVE-2026-94055 — GnuTLS Use-after-Free — Low • CVE-2026-94056 — Proxy Protocol v2 Stack Memory Leak — High • CVE-2026-94057 — SMTP Smuggling — Medium Mutlaka 4.100.1 sürümüne güncelleme yapın.
Post summary
The tweet announces the release of Exim version 4.100.1, which patches four CVEs, and urges users to update.
00000324
2.4K followersView on X
𝔸𝕟𝕠𝕟𝕪𝕞𝕠𝕦𝕤 ℍ𝕒𝕔𝕜𝕥𝕚𝕧𝕚𝕤𝕥☭⃠🅇@YourAnon_irc46d
Patch
New critical vulns: MongoDB C Driver TLS heap overflow (CVE-2026-93393) & Exim SMTP smuggling (CVE-2026-94057+) emerge in last 2 hrs. Both severely risk data privacy/integrity in transit. Patch NOW! #Cybersecurity #Vulnerabilities #TLS
Post summary
The post announces two new critical vulnerabilities and explicitly calls for immediate patching. It includes vulnerability types but no PoC, exploit tooling, active exploitation report, or false-positive claim.
0000052
16 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	exim	exim	-	-	-

Explore more

Back to dashboard exim CVEs exim vulnerabilities

What researchers are saying

CVE-2026-94057

Hugo | DevOps | Cybersecurity[verified]@HugoValtersPatch

The post discloses CVE-2026-94057, an Exim SMTP smuggling flaw with CVSS 4 that enables message spoofing, and emphasizes an immediate update while noting a patch is under review.

Rıdvan Yağlı[verified]@ridvanyagliPatch

The tweet announces the release of Exim version 4.100.1, which patches four CVEs, and urges users to update.

CVE@CVEnewDisclosure

The tweet announces CVE-2026-94057 in Exim, detailing an SMTP smuggling vulnerability for versions before 4.100.1, but contains no mentions of active exploitation, functional PoC code, named exploits, or specific remediation patches.

𝔸𝕟𝕠𝕟𝕪𝕞𝕠𝕦𝕤 ℍ𝕒𝕔𝕜𝕥𝕚𝕧𝕚𝕤𝕥☭⃠🅇@YourAnon_ircPatch

The post announces two new critical vulnerabilities and explicitly calls for immediate patching. It includes vulnerability types but no PoC, exploit tooling, active exploitation report, or false-positive claim.