Critical Exim Mail Server Vulnerabilities Require Immediate Patching

Severity: High (Score: 72.8)

Sources: Gbhackers, Cybersecuritynews

Summary

The Exim mail server developers released version 4.99.2 on 2026-05-01 to address four critical vulnerabilities. These vulnerabilities could allow attackers to crash server connections, corrupt memory heaps, or leak sensitive system data through malicious DNS data. Exim is widely used as a message transfer agent, making these flaws particularly concerning for system administrators. Administrators are strongly advised to apply the patch immediately to mitigate potential risks. The vulnerabilities could have a significant impact on the stability and security of email services globally. Specific CVEs have not been disclosed in the articles, but the urgency of the situation is emphasized. The patch is now available, and administrators should prioritize its implementation to protect their systems. Key Points: • Exim version 4.99.2 released to fix four critical vulnerabilities. • Vulnerabilities could lead to server crashes and data leaks. • Immediate patching is recommended for all Exim mail server users.

Key Entities

• Data Breach (attack_type)
• CWE-200 - Exposure of Sensitive Information (cwe)
• Exim (platform)