216.73.217.22

CVE-2026-48840

· Published 30/05/2026 02:16 · Modified 30/05/2026 04:17

Labels: CVE-2026-48840 2026-05-30CVE-2026-48840CWE-839[email protected]

Essential information

Published
30/05/2026 02:16
Modified
30/05/2026 04:17
Author
Creator
CVSS
5.3 MEDIUM (v3.1)
CISA KEV
No
CWE
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS metrics

Description

Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of uninitialized stack memory values to a client.

NVD status

Status
Received — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
exim / exim cpe:2.3:a:exim:exim:<4.99.4:*:*:*:*:*:*:*

References