← Database

CVE-2025-26794

HIGH CVSS: 7.5 Published: 2025-02-21 Modified: 2026-06-17

Description

Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL injection. (Resolving SQL injection requires an update to 4.99.1 in certain non-default rate-limit configurations.)

Affected Platforms

Exim Exim

Weakness Type

CWE-89

References