CVE-2025-26794

Summary

CVE-2025-26794 is a vulnerability affecting Exim email server version 4.98 and earlier. The issue resides in the way SQLite hints and ETRN (Extended Mail Transfer Protocol) serialization are handled. An attacker can exploit this flaw to perform remote SQL injection, potentially gaining unauthorized access to sensitive data or even taking control of the affected system. This vulnerability poses a serious threat to organizations that rely on Exim for their email services and have not yet applied the available patch. It is strongly recommended to update Exim to version 4.98.1 as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.