https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T01:12:19.355026+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-00108 bdu:2024-00108 2026-10-04T01:12:19.706597+00:00 bdu:2024-00108 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0054 certfr-2024-avi-0054 — Une vulnérabilité a été découverte dans Exim. Elle permet à un attaquant de provoquer un contournement de la politique… 2026-10-04T01:12:19.706633+00:00 certfr-2024-avi-0054 https://cve.radiocsirt.org/vuln/cleanstart-2025-lv68873 CLEANSTART-2025-LV68873 — Exim before 4 2026-10-04T01:12:19.706652+00:00

Affected: CleanStart: exim

Security vulnerability affects the exim package. Exim before 4.

 https://cve.radiocsirt.org/vuln/euvd-2026-259338 EUVD-2026-259338 2026-10-04T01:12:19.706679+00:00 EUVD-2026-259338 https://cve.radiocsirt.org/vuln/fkie_cve-2023-51766 fkie_cve-2023-51766 2026-10-04T01:12:19.706691+00:00

Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because Exim supports <LF>.<CR><LF> but some other popular e-mail servers do not.

 https://cve.radiocsirt.org/vuln/ghsa-w6ww-869j-cgm6 GHSA-w6ww-869j-cgm6 2026-10-04T01:12:19.706714+00:00

Exim through 4.97 allows SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to inject e-mail messages that appear to originate from the Exim server, allowing bypass of an SPF protection mechanism. This occurs because Exim supports <LF>.<CR><LF> but some other popular e-mail servers do not.

 https://cve.radiocsirt.org/vuln/gsd-2023-51766 gsd-2023-51766 2026-10-04T01:12:19.706729+00:00 gsd-2023-51766 https://cve.radiocsirt.org/vuln/oesa-2024-1926 OESA-2024-1926 — exim security update 2026-10-04T01:12:19.706739+00:00

Affected: openEuler:22.03-LTS-SP3: exim

Exim is a message transfer agent (MTA) developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal of flexibility in the way mail can be routed, and there are extensive facilities for checking incoming mail. Exim can be installed in place of sendmail, although the configuration of exim is quite different to that of sendmail. Security Fix(es): A vulnerability was found in Exim and classified as problematic. This issue affects some unknown processing of the component Regex Handler. The manipulation leads to use after free. The name of the patch is 4e9ed49f8f12eb331b29bd5b6dc3693c520fddc2. It is recommended to apply a patch to fix this issue. The identifier VDB-211073 was assigned to this vulnerability.(CVE-2022-3559) Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because Exim supports &lt;LF&gt;.&lt;CR&gt;&lt;LF&gt; but some other popular e-mail servers do not.(CVE-2023-51766)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:0007-1 openSUSE-SU-2024:0007-1 — Security update for exim 2026-10-04T01:12:19.706768+00:00

Security update for exim

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-51766 UBUNTU-CVE-2023-51766 2026-10-04T01:12:19.706788+00:00

Affected: Ubuntu:Pro:14.04:LTS: exim4, Ubuntu:Pro:16.04:LTS: exim4, Ubuntu:Pro:18.04:LTS: exim4, Ubuntu:20.04:LTS: exim4, Ubuntu:22.04:LTS: exim4

Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because Exim supports <LF>.<CR><LF> but some other popular e-mail servers do not.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3206 WID-SEC-W-2023-3206 — SMTP Implementierungen: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-04T01:12:19.706813+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in verschiedenen SMTP Implementierungen ausnutzen, um Sicherheitsvorkehrungen zu umgehen.