https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 23:27:15 +0000 https://vulnerability.circl.lu/vuln/cve-2026-40685 <p><strong>Affected:</strong> Exim</p> <p>In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a JSON operator encounters malformed JSON in an untrusted header, because of an incorrect implementation of \ skipping.</p> <p><strong>Affected:</strong> Exim</p> <p>In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a JSON operator encounters malformed JSON in an untrusted header, because of an incorrect implementation of \ skipping.</p> https://vulnerability.circl.lu/vuln/cve-2026-40685 https://vulnerability.circl.lu/vuln/usn-8228-1 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: exim4, Ubuntu:24.04:LTS: exim4, Ubuntu:25.10: exim4, Ubuntu:26.04:LTS: exim4</p> <p>It was discovered that Exim incorrectly handled parsing malformed JSON in message headers. A remote attacker could possibly use this issue to execute arbitrary code. (CVE-2026-40685)</p> <p>It was discovered that Exim incorrectly handled processing of UTF-8 trailing characters. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2026-40686)</p> <p>It was discovered that Exim incorrectly handled SPA authenticator input. An authenticated user could possibly use this issue to execute arbitrary code. (CVE-2026-40687)</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: exim4, Ubuntu:24.04:LTS: exim4, Ubuntu:25.10: exim4, Ubuntu:26.04:LTS: exim4</p> <p>It was discovered that Exim incorrectly handled parsing malformed JSON in message headers. A remote attacker could possibly use this issue to execute arbitrary code. (CVE-2026-40685)</p> <p>It was discovered that Exim incorrectly handled processing of UTF-8 trailing characters. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2026-40686)</p> <p>It was discovered that Exim incorrectly handled SPA authenticator input. An authenticated user could possibly use this issue to execute arbitrary code. (CVE-2026-40687)</p> https://vulnerability.circl.lu/vuln/usn-8228-1