Vulnerability Details CVE-2026-48840
Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of uninitialized stack memory values to a client.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 8.2%
CVSS Severity
CVSS v3 Score 5.3
Products affected by CVE-2026-48840
-
-
-
cpe:2.3:a:exim:exim:4.89.1
-
-
cpe:2.3:a:exim:exim:4.90.0.22
-
cpe:2.3:a:exim:exim:4.90.0.27
-
cpe:2.3:a:exim:exim:4.90.1
-
-
-
cpe:2.3:a:exim:exim:4.92.1
-
cpe:2.3:a:exim:exim:4.92.2
-
-
cpe:2.3:a:exim:exim:4.93.0.4
-
cpe:2.3:a:exim:exim:4.93.0.4-3.1
-
-
cpe:2.3:a:exim:exim:4.94.1
-
cpe:2.3:a:exim:exim:4.94.2
-
-
-
cpe:2.3:a:exim:exim:4.96.1
-
cpe:2.3:a:exim:exim:4.96.2
-
-
cpe:2.3:a:exim:exim:4.97.1
-
-
cpe:2.3:a:exim:exim:4.98.1
-
cpe:2.3:a:exim:exim:4.98.2
-
-
cpe:2.3:a:exim:exim:4.99.1