https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T03:44:01.595490+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2023-51766 CVE-2023-51766 2026-09-29T03:44:01.629827+00:00

Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because Exim supports <LF>.<CR><LF> but some other popular e-mail servers do not.

 https://vulnerability.circl.lu/vuln/usn-6611-1 USN-6611-1 — exim4 vulnerability 2026-09-29T03:44:01.629906+00:00

Affected: Ubuntu:Pro:16.04:LTS: exim4, Ubuntu:Pro:18.04:LTS: exim4, Ubuntu:20.04:LTS: exim4, Ubuntu:22.04:LTS: exim4

It was discovered that Exim incorrectly handled certain requests. A remote attacker could possibly use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism.