CVE-2025-26794

7.5

HIGHCVSS v3

Published

February 21, 2025

Affected

2 projects

Assigned by

MITRE

Severity scale

010

Description

Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL injection. (Resolving SQL injection requires an update to 4.99.1 in certain non-default rate-limit configurations.)

NixOS/nixpkgs

GitHubNix Packages collection & NixOS

NVD

Exim/exim

GitHubExim Mail Transport Agent - source, testsuite and documentation

>= 4.98, < 4.98.1NVD

More on this CVE

NVD↗GitHub Advisory↗

Security Advisories

CVE-2025-26794

Description

More on this CVE