https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:30:00.041237+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-06520 bdu:2026-06520 2026-10-02T17:30:00.141408+00:00 bdu:2026-06520 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0589 certfr-2026-avi-0589 — Une vulnérabilité a été découverte dans Exim. Elle permet à un attaquant de provoquer un problème de sécurité non spéci… 2026-10-02T17:30:00.141445+00:00 certfr-2026-avi-0589 https://cve.radiocsirt.org/vuln/euvd-2026-318372 EUVD-2026-318372 2026-10-02T17:30:00.141465+00:00 EUVD-2026-318372 https://cve.radiocsirt.org/vuln/fkie_cve-2026-45185 fkie_cve-2026-45185 2026-10-02T17:30:00.141477+00:00

Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing path. It is triggered when a client sends a TLS close_notify mid-body during a CHUNKING transfer, followed by a final cleartext byte on the same TCP connection. This can lead to heap corruption. An unauthenticated network attacker exploiting this vulnerability could execute arbitrary code.

 https://cve.radiocsirt.org/vuln/ghsa-fhg4-whcv-f8v4 GHSA-fhg4-whcv-f8v4 2026-10-02T17:30:00.141506+00:00

Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing path. It is triggered when a client sends a TLS close_notify mid-body during a CHUNKING transfer, followed by a final cleartext byte on the same TCP connection. This can lead to heap corruption. An unauthenticated network attacker exploiting this vulnerability could execute arbitrary code.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0163 NCSC-2026-0163 — Kwetsbaarheid verholpen in Exim 2026-10-02T17:30:00.141522+00:00 NCSC-2026-0163 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-45185 UBUNTU-CVE-2026-45185 2026-10-02T17:30:00.141540+00:00

Affected: Ubuntu:Pro:14.04:LTS: exim4, Ubuntu:Pro:16.04:LTS: exim4, Ubuntu:Pro:18.04:LTS: exim4, Ubuntu:Pro:20.04:LTS: exim4, Ubuntu:22.04:LTS: exim4, Ubuntu:24.04:LTS: exim4, Ubuntu:25.10: exim4, Ubuntu:26.04:LTS: exim4

Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing path. It is triggered when a client sends a TLS close_notify mid-body during a CHUNKING transfer, followed by a final cleartext byte on the same TCP connection. This can lead to heap corruption. An unauthenticated network attacker exploiting this vulnerability could execute arbitrary code.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1505 WID-SEC-W-2026-1505 — Exim: Schwachstelle ermöglicht Codeausführung 2026-10-02T17:30:00.141571+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Exim ausnutzen, um beliebigen Programmcode auszuführen.