#Email Security
Critical Exim Vulnerability (EXIM-Security-2026-05-01.1): Remote Code Execution via GnuTLS BDAT Flaw — Patch Now
A critical use-after-free vulnerability in Exim mail servers (versions 4.97–4.99.2 with GnuTLS) allows unauthenticated remote attackers to corrupt heap memory and potentially execute arbitrary code. Patch to version...
Exim 4.99.2 Patches Four Vulnerabilities Including Heap Corruption, DNS Crash, and Memory Leaks
The Exim development team has released version 4.99.2 to fix four security vulnerabilities — including a DNS-triggered crash on musl systems (CVE-2026-40684), heap corruption via malformed JSON (CVE-2026-40685),...