CVE-2026-48840

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-48840
Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of uninitialized stack memory values to a client.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://exim.org/static/doc/security/EXIM-Security-2026-05-19.1 Vendor Advisory
https://www.openwall.com/lists/oss-security/2026/05/29/3 Mailing List Mitigation Third Party Advisory
http://www.openwall.com/lists/oss-security/2026/05/29/3 Mailing List Mitigation Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:exim:exim:*:*:*:*:*:*:*:*
History

03 Jun 2026, 19:21

Type Values Removed Values Added
First Time Exim exim
Exim
CPE cpe:2.3:a:exim:exim:*:*:*:*:*:*:*:*
References () https://exim.org/static/doc/security/EXIM-Security-2026-05-19.1 - () https://exim.org/static/doc/security/EXIM-Security-2026-05-19.1 - Vendor Advisory
References () https://www.openwall.com/lists/oss-security/2026/05/29/3 - () https://www.openwall.com/lists/oss-security/2026/05/29/3 - Mailing List, Mitigation, Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2026/05/29/3 - () http://www.openwall.com/lists/oss-security/2026/05/29/3 - Mailing List, Mitigation, Third Party Advisory

30 May 2026, 04:17

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2026/05/29/3 -

30 May 2026, 02:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-05-30 02:16

Updated : 2026-06-03 19:21

NVD link : CVE-2026-48840

Mitre link : CVE-2026-48840

CVE.ORG link : CVE-2026-48840

JSON object : View

Products Affected

exim

  • exim
CWE
CWE-839

Numeric Range Comparison Without Minimum Check