https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T17:11:12.944369+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-40685 CVE-2026-40685 2026-09-29T17:11:13.261055+00:00

Affected: Exim

In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a JSON operator encounters malformed JSON in an untrusted header, because of an incorrect implementation of \ skipping.

 https://vulnerability.circl.lu/vuln/usn-8228-1 USN-8228-1 — exim4 vulnerabilities 2026-09-29T17:11:13.261172+00:00

Affected: Ubuntu:22.04:LTS: exim4, Ubuntu:24.04:LTS: exim4, Ubuntu:25.10: exim4, Ubuntu:26.04:LTS: exim4

It was discovered that Exim incorrectly handled parsing malformed JSON in message headers. A remote attacker could possibly use this issue to execute arbitrary code. (CVE-2026-40685)

It was discovered that Exim incorrectly handled processing of UTF-8 trailing characters. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2026-40686)

It was discovered that Exim incorrectly handled SPA authenticator input. An authenticated user could possibly use this issue to execute arbitrary code. (CVE-2026-40687)