Security Advisory

CVE-2025-26794

7.5
HIGH

Vulnerability Description

Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL injection. (Resolving SQL injection requires an update to 4.99.1 in certain non-default rate-limit configurations.)
Published Date February 21, 2025
Official Source NIST NVD Advisory