Multiple Exim Mail Server Vulnerabilities Leads to Crash with Malicious DNS data

Cybersecuritynews •Abinaya • May 2, 2026

The Exim development team has released version 4.99.2 to address four newly discovered security vulnerabilities affecting their mail server software. These flaws allow attackers to potentially crash servers, corrupt memory, or leak sensitive information. Because Exim is one of the most widely used message transfer agents on the internet, system administrators need to apply this […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Exim Mail Server Vulnerabilities Require Immediate Patching The Exim mail server developers released version 4.99.2 on 2026-05-01 to address four critical vulnerabilities. These vulnerabilities could allow attackers to crash server connections, corrupt memory heaps, or leak sensitive system data through malicious DNS data. Exim is widely used as a message transfer agent, making these flaws particularly concerning for system administrators. Administrators are strongly advised to apply the patch immediately to mitigate potential risks. The vulnerabilities could have a significant impact on the stability and security of email services globally. Specific CVEs have not been disclosed in the articles, but the urgency of the situation is emphasized. The patch is now available, and administrators should prioritize its implementation to protect their systems. 2 sources 73

Multiple Exim Mail Server Vulnerabilities Leads to Crash with Malicious DNS data

The full story

Extracted Entities

Attack Types (1)

Platforms (1)