Exim Remote Code Execution Vulnerability

Release Date: 13 May 2026

RISK: Medium Risk

TYPE: Security software and application - Security Software & Appliance

A vulnerability has been identified in Exim. A remote attacker could exploit this vulnerability to trigger denial of service condition and remote code execution on the targeted system.

---

Impact

• Remote Code Execution
• Denial of Service

---

System / Technologies affected

• All Exim versions from 4.97 up to and including 4.99.2 are affected.

This vulnerability only impacts builds that use USE_GNUTLS=yes. Builds using OpenSSL or other TLS libraries are not affected.

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

• Update to Exim version 4.99.3

---

Vulnerability Identifier

• CVE-2026-45185

---

Source

• EXIM

---

Related Link

• https://www.exim.org/static/doc/security/EXIM-Security-2026-05-01.1/EXIM-Security-2026-05-01.1.txt