Exim Product Security Update Advisory (CVE-2026-45185)

Overview

A security update has been released that resolves a remote code execution vulnerability (CVE-2026-45185) in the Exim product. Exim versions 4.97 through 4.99.2 and earlier are affected.

Impact

the vulnerability is described as a remote code execution vulnerability. this means that it could allow a threat actor to remotely execute code execution.

Response

a patch has been made available in the latest update and users should update to Exim version 4.99.3.

Note

exim Security Advisory for EXIM-Security-2026-05-01.1 / CVE-2026-45185 was pointed to the reference site.