Medium severity4.0NVD Advisory· Published Sep 19, 2026· Updated Sep 24, 2026

CVE-2026-94057

Description

Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Exim/Eximllm-fuzzy2 versions
<4.100.1+ 1 more
- (no CPE)range: <4.100.1
- cpe:2.3:a:exim:exim:*:*:*:*:*:*:*:*range: <4.100.1

Patches

Vulnerability mechanics

References

lists.exim.org/lurker/message/20260918.121220.0f87338e.en.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000