Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3f88ddbd83 advisory.

    This is new version of exim fixing CVE-2026-94054, CVE-2026-94055, CVE-2026-94056, CVE-2026-94057.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4f9e436ed5 advisory.

    This is new version of exim fixing CVE-2026-94054, CVE-2026-94055, CVE-2026-94056, CVE-2026-94057.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d202b74c6a advisory.

    This is new version of exim fixing CVE-2026-94054, CVE-2026-94055, CVE-2026-94056, CVE-2026-94057.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8834-1 advisory.

    It was discovered that Exim had an out-of-bounds write when Proxy-Protocol was used with an attacker-     controlled proxy. A remote attacker could possibly use this issue to execute arbitrary code.
    (CVE-2026-94054)

    It was discovered that Exim had a use-after-free when certain non-default TLS settings were used with     GnuTLS. A remote attacker could possibly use this issue to cause Exim to crash, resulting in a denial of     service. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-94055)

    It was discovered that Exim allowed attackers to read uninitialized data from stack memory when Proxy-     Protocol was used with an attacker-controlled proxy. A remote attacker could possibly use this issue to     obtain sensitive information. (CVE-2026-94056)

    It was discovered that Exim allowed SMTP smuggling via crafted data sent after a rejection during DATA     processing. A remote attacker could possibly use this issue to inject arbitrary email messages.
    (CVE-2026-94057)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
374587	Fedora 45 : exim (2026-3f88ddbd83)	Nessus	Fedora Local Security Checks	Local	high
366010	Fedora 44 : exim (2026-4f9e436ed5)	Nessus	Fedora Local Security Checks	Local	high
366008	Fedora 43 : exim (2026-d202b74c6a)	Nessus	Fedora Local Security Checks	Local	high
350975	Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : Exim vulnerabilities (USN-8834-1)	Nessus	Ubuntu Local Security Checks	Local	high

Detections

Analytics

CVE-2026-94055

medium

Tenable Plugins

high

high

high

high