Paper/Archive/CVE-2025-26794

CVE-2025-26794

Exim Exim — Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL injection.

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 99.6.996 × 2019.9 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL injection. (Resolving SQL injection requires an update to 4.99.1 in certain non-default rate-limit configurations.)

Affected

ProductAffectedFixed inSource

Exim4.98 – < 4.98.14.98.1CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

mitre (CNA)7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refexim.org refgithub.com/Exim/exim/wiki/EximSecurity refexim.org/static/doc/security/CVE-2025-26794.txt refcode.exim.org/exim/exim/commit/bfe32b5c6ea033736a26da8421513206db9fe305 refbugzilla.suse.com/show_bug.cgi?id=1237424 refgithub.com/NixOS/nixpkgs/pull/383926 refgithub.com/openbsd/ports/commit/584d2c49addce9ca0ae67882cc16969104d7f82d refexim.org/static/doc/security/EXIM-Security-2025-12-09.1/report.txt refopenwall.com/lists/oss-security/2025/02/19/1 refopenwall.com/lists/oss-security/2025/02/21/4 refopenwall.com/lists/oss-security/2025/02/21/5