DeutschShown in its original language — a full translation is planned for a future version.
Exim und cPanel/WHM: Mehrere Schwachstellen
view advisory published 2026-05-03
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Exim und cPanel cPanel/WHM ausnutzen, um einen Denial of Service Angriff durchzuführen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-40687US | critical9.1 | — | ||
In Exim before 4.99.2, when the SPA authentication driver is used with an adversarial SPA resource, there can be an out-of-bounds write that crashes the connection instance, or err… | ||||
| CVE-2026-40686US | medium5.3 | — | ||
In Exim before 4.99.2, when utf8 operators are enabled, there is an out-of-bounds read if large UTF-8 trailing characters are present (malformed UTF-8 header data). Information mig… | ||||
| CVE-2026-40685US | critical9.8 | — | ||
In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a JSON operator encounters malformed JSON in an untrusted header, because of an incor… | ||||
| CVE-2026-40684US | high7.5 | — | ||
In Exim before 4.99.2, on systems using musl libc (not glibc), an attacker can crash the connection instance when malformed DNS data is present in PTR records. This is caused by a… | ||||
02
references
External citations — patches, advisories, analysis.
- cPanel Change Log vom 2026-05-03external
- cPanel Change Log vom 2026-05-03external
- cPanel Change Log vom 2026-05-03external
- cPanel Change Log vom 2026-05-03external
- cPanel Change Log vom 2026-05-03external
- cPanel & WHM Change Log vom 2026-07-27external
- Debian Security Advisory DSA-6265 vom 2026-05-12external
- Exim Announce vom 2026-05-03external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan