{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-45185", "tracking": { "current_release_date": "2026-05-15T13:30:00.102615Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-45185", "initial_release_date": "2026-05-12T21:26:21.174591Z", "revision_history": [ { "date": "2026-05-12T21:26:21.174591Z", "number": "1", "summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (7).| CWES updated (1)." }, { "date": "2026-05-12T21:26:27.001221Z", "number": "2", "summary": "NCSC Score created." }, { "date": "2026-05-12T21:59:43.000399Z", "number": "3", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (1).| References created (7).| CWES updated (1)." }, { "date": "2026-05-12T21:59:44.287662Z", "number": "4", "summary": "NCSC Score updated." }, { "date": "2026-05-13T00:43:17.212770Z", "number": "5", "summary": "Source created.| CVE status created. (valid)| Products connected (1).| Product Identifiers created (2).| Products created (1)." }, { "date": "2026-05-13T02:38:46.658469Z", "number": "6", "summary": "References created (1)." }, { "date": "2026-05-13T03:41:59.623753Z", "number": "7", "summary": "Source created.| CVE status created. (valid)" }, { "date": "2026-05-13T06:43:29.982094Z", "number": "8", "summary": "Description created for source." }, { "date": "2026-05-13T10:11:07.475908Z", "number": "9", "summary": "Source created.| CVE status created. (valid)| Products connected (2).| Product Identifiers created (2).| Products created (1).| References created (5)." }, { "date": "2026-05-13T10:11:10.548626Z", "number": "10", "summary": "NCSC Score updated." }, { "date": "2026-05-13T13:39:23.490945Z", "number": "11", "summary": "Unknown change." }, { "date": "2026-05-13T13:39:29.244774Z", "number": "12", "summary": "NCSC Score updated." }, { "date": "2026-05-13T14:57:43.347030Z", "number": "13", "summary": "Unknown change." }, { "date": "2026-05-13T15:10:48.105340Z", "number": "14", "summary": "Source connected.| CVE status created. (valid)| EPSS created." }, { "date": "2026-05-13T15:10:50.937876Z", "number": "15", "summary": "NCSC Score updated." }, { "date": "2026-05-13T16:59:28.410951Z", "number": "16", "summary": "References created (1)." }, { "date": "2026-05-13T16:59:31.575267Z", "number": "17", "summary": "NCSC Score updated." }, { "date": "2026-05-13T21:04:55.319314Z", "number": "18", "summary": "Source created.| CVE status created. (valid)| News created (1)." }, { "date": "2026-05-13T21:05:03.388738Z", "number": "19", "summary": "NCSC Score updated." }, { "date": "2026-05-14T23:21:05.779509Z", "number": "20", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (100).| Product Identifiers created (100).| Products created (8).| References created (5)." }, { "date": "2026-05-15T12:09:49.879344Z", "number": "21", "summary": "Source connected.| CVE status created. (valid)" }, { "date": "2026-05-15T12:09:55.648823Z", "number": "22", "summary": "NCSC Score updated." }, { "date": "2026-05-15T13:29:54.008014Z", "number": "23", "summary": "Source created.| CVE status created. (valid)| News created (1)." } ], "status": "interim", "version": "23" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1295663", "product_identification_helper": { "cpe": "cpe:/o:debian:debian_linux:-" } } } ], "category": "product_name", "name": "Debian Linux" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:deb/4.96-15+deb12u9", "product": { "name": "vers:deb/4.96-15+deb12u9", "product_id": "CSAFPID-6981639", "product_identification_helper": { "purl": "pkg:deb/debian/exim4@4.96-15+deb12u9?distro=bookworm" } } } ], "category": "product_name", "name": "exim4" } ], "category": "product_family", "name": "bookworm" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:deb/4.94.2-7+deb11u5", "product": { "name": "vers:deb/4.94.2-7+deb11u5", "product_id": "CSAFPID-6982637", "product_identification_helper": { "purl": "pkg:deb/debian/exim4@4.94.2-7+deb11u5?distro=bullseye" } } } ], "category": "product_name", "name": "exim4" } ], "category": "product_family", "name": "bullseye" } ], "category": "vendor", "name": "Debian" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/4.97|<4.99.3", "product": { "name": "vers:unknown/4.97|<4.99.3", "product_id": "CSAFPID-6982043" } } ], "category": "product_name", "name": "Exim" } ], "category": "vendor", "name": "Exim" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<4.99.3", "product": { "name": "vers:unknown/<4.99.3", "product_id": "CSAFPID-6984088" } } ], "category": "product_name", "name": "Exim" } ], "category": "vendor", "name": "Open Source" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1330299", "product_identification_helper": { "cpe": "cpe:/o:canonical:ubuntu_linux:-" } } } ], "category": "product_name", "name": "Ubuntu Linux" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/4.92.1-1ubuntu3", "product": { "name": "vers:unknown/4.92.1-1ubuntu3", "product_id": "CSAFPID-6290151", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.92.1-1ubuntu3?arch=source&distro=focal" } } }, { "category": "product_version_range", "name": "vers:unknown/4.92.1-1ubuntu4", "product": { "name": "vers:unknown/4.92.1-1ubuntu4", "product_id": "CSAFPID-6290152", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.92.1-1ubuntu4?arch=source&distro=focal" } } }, { "category": "product_version_range", "name": "vers:unknown/4.93-11ubuntu1", "product": { "name": "vers:unknown/4.93-11ubuntu1", "product_id": "CSAFPID-6290163", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.93-11ubuntu1?arch=source&distro=focal" } } }, { "category": "product_version_range", "name": "vers:unknown/4.93-12ubuntu1", "product": { "name": "vers:unknown/4.93-12ubuntu1", "product_id": "CSAFPID-6290164", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.93-12ubuntu1?arch=source&distro=focal" } } }, { "category": "product_version_range", "name": "vers:unknown/4.93-13ubuntu1", "product": { "name": "vers:unknown/4.93-13ubuntu1", "product_id": "CSAFPID-6290165", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.93-13ubuntu1?arch=source&distro=focal" } } }, { "category": "product_version_range", "name": "vers:unknown/4.93-13ubuntu1.1", "product": { "name": "vers:unknown/4.93-13ubuntu1.1", "product_id": "CSAFPID-6290167", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.93-13ubuntu1.1?arch=source&distro=focal" } } }, { "category": "product_version_range", "name": "vers:unknown/4.93-13ubuntu1.10", "product": { "name": "vers:unknown/4.93-13ubuntu1.10", "product_id": "CSAFPID-6290182", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.93-13ubuntu1.10?arch=source&distro=focal" } } }, { "category": "product_version_range", "name": "vers:unknown/4.93-13ubuntu1.11", "product": { "name": "vers:unknown/4.93-13ubuntu1.11", "product_id": "CSAFPID-6290187", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.93-13ubuntu1.11?arch=source&distro=focal" } } }, { "category": "product_version_range", "name": "vers:unknown/4.93-13ubuntu1.12", "product": { "name": "vers:unknown/4.93-13ubuntu1.12", "product_id": "CSAFPID-6290190", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.93-13ubuntu1.12?arch=source&distro=focal" } } }, { "category": "product_version_range", "name": "vers:unknown/4.93-13ubuntu1.5", "product": { "name": "vers:unknown/4.93-13ubuntu1.5", "product_id": "CSAFPID-6290171", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.93-13ubuntu1.5?arch=source&distro=focal" } } }, { "category": "product_version_range", "name": "vers:unknown/4.93-13ubuntu1.6", "product": { "name": "vers:unknown/4.93-13ubuntu1.6", "product_id": "CSAFPID-6290175", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.93-13ubuntu1.6?arch=source&distro=focal" } } }, { "category": "product_version_range", "name": "vers:unknown/4.93-13ubuntu1.7", "product": { "name": "vers:unknown/4.93-13ubuntu1.7", "product_id": "CSAFPID-6290176", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.93-13ubuntu1.7?arch=source&distro=focal" } } }, { "category": "product_version_range", "name": "vers:unknown/4.93-13ubuntu1.8", "product": { "name": "vers:unknown/4.93-13ubuntu1.8", "product_id": "CSAFPID-6290177", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.93-13ubuntu1.8?arch=source&distro=focal" } } }, { "category": "product_version_range", "name": "vers:unknown/4.93-13ubuntu1.9", "product": { "name": "vers:unknown/4.93-13ubuntu1.9", "product_id": "CSAFPID-6290178", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.93-13ubuntu1.9?arch=source&distro=focal" } } }, { "category": "product_version_range", "name": "vers:unknown/4.93-9ubuntu1", "product": { "name": "vers:unknown/4.93-9ubuntu1", "product_id": "CSAFPID-6290161", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.93-9ubuntu1?arch=source&distro=focal" } } }, { "category": "product_version_range", "name": "vers:unknown/4.93~rc2-1ubuntu1", "product": { "name": "vers:unknown/4.93~rc2-1ubuntu1", "product_id": "CSAFPID-6290157", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.93~RC2-1ubuntu1?arch=source&distro=focal" } } }, { "category": "product_version_range", "name": "vers:unknown/>=0", "product": { "name": "vers:unknown/>=0", "product_id": "CSAFPID-6290191" } } ], "category": "product_name", "name": "exim4" } ], "category": "product_family", "name": "Ubuntu:20.04:LTS" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/4.94.2-7ubuntu2", "product": { "name": "vers:unknown/4.94.2-7ubuntu2", "product_id": "CSAFPID-6290193", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.94.2-7ubuntu2?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/4.95-2ubuntu2", "product": { "name": "vers:unknown/4.95-2ubuntu2", "product_id": "CSAFPID-6290194", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.95-2ubuntu2?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/4.95-4ubuntu1", "product": { "name": "vers:unknown/4.95-4ubuntu1", "product_id": "CSAFPID-6290195", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.95-4ubuntu1?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/4.95-4ubuntu2", "product": { "name": "vers:unknown/4.95-4ubuntu2", "product_id": "CSAFPID-6290196", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.95-4ubuntu2?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/4.95-4ubuntu2.1", "product": { "name": "vers:unknown/4.95-4ubuntu2.1", "product_id": "CSAFPID-6290198", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.95-4ubuntu2.1?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/4.95-4ubuntu2.2", "product": { "name": "vers:unknown/4.95-4ubuntu2.2", "product_id": "CSAFPID-6290199", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.95-4ubuntu2.2?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/4.95-4ubuntu2.3", "product": { "name": "vers:unknown/4.95-4ubuntu2.3", "product_id": "CSAFPID-6290200", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.95-4ubuntu2.3?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/4.95-4ubuntu2.4", "product": { "name": "vers:unknown/4.95-4ubuntu2.4", "product_id": "CSAFPID-6290201", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.95-4ubuntu2.4?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/4.95-4ubuntu2.5", "product": { "name": "vers:unknown/4.95-4ubuntu2.5", "product_id": "CSAFPID-6290202", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.95-4ubuntu2.5?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/4.95-4ubuntu2.6", "product": { "name": "vers:unknown/4.95-4ubuntu2.6", "product_id": "CSAFPID-6290203", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.95-4ubuntu2.6?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/4.95-4ubuntu2.7", "product": { "name": "vers:unknown/4.95-4ubuntu2.7", "product_id": "CSAFPID-7053153", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.95-4ubuntu2.7?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/>=0|<4.95-4ubuntu2.8", "product": { "name": "vers:unknown/>=0|<4.95-4ubuntu2.8", "product_id": "CSAFPID-7053154" } } ], "category": "product_name", "name": "exim4" } ], "category": "product_family", "name": "Ubuntu:22.04:LTS" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/4.96-17ubuntu2", "product": { "name": "vers:unknown/4.96-17ubuntu2", "product_id": "CSAFPID-6290205", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.96-17ubuntu2?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/4.96-17ubuntu2.1", "product": { "name": "vers:unknown/4.96-17ubuntu2.1", "product_id": "CSAFPID-6290206", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.96-17ubuntu2.1?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/4.97-3ubuntu1", "product": { "name": "vers:unknown/4.97-3ubuntu1", "product_id": "CSAFPID-6290207", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.97-3ubuntu1?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/4.97-4ubuntu1", "product": { "name": "vers:unknown/4.97-4ubuntu1", "product_id": "CSAFPID-6290208", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.97-4ubuntu1?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/4.97-4ubuntu3", "product": { "name": "vers:unknown/4.97-4ubuntu3", "product_id": "CSAFPID-6290209", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.97-4ubuntu3?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/4.97-4ubuntu4", "product": { "name": "vers:unknown/4.97-4ubuntu4", "product_id": "CSAFPID-6290210", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.97-4ubuntu4?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/4.97-4ubuntu4.1", "product": { "name": "vers:unknown/4.97-4ubuntu4.1", "product_id": "CSAFPID-6290211", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.97-4ubuntu4.1?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/4.97-4ubuntu4.2", "product": { "name": "vers:unknown/4.97-4ubuntu4.2", "product_id": "CSAFPID-6290214", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.97-4ubuntu4.2?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/4.97-4ubuntu4.3", "product": { "name": "vers:unknown/4.97-4ubuntu4.3", "product_id": "CSAFPID-6290215", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.97-4ubuntu4.3?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/4.97-4ubuntu4.4", "product": { "name": "vers:unknown/4.97-4ubuntu4.4", "product_id": "CSAFPID-7053155", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.97-4ubuntu4.4?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/>=0|<4.97-4ubuntu4.5", "product": { "name": "vers:unknown/>=0|<4.97-4ubuntu4.5", "product_id": "CSAFPID-7053156" } } ], "category": "product_name", "name": "exim4" } ], "category": "product_family", "name": "Ubuntu:24.04:LTS" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/4.98.1-1ubuntu2", "product": { "name": "vers:unknown/4.98.1-1ubuntu2", "product_id": "CSAFPID-6290217", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.98.1-1ubuntu2?arch=source&distro=questing" } } }, { "category": "product_version_range", "name": "vers:unknown/4.98.2-1ubuntu1", "product": { "name": "vers:unknown/4.98.2-1ubuntu1", "product_id": "CSAFPID-6290218", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.98.2-1ubuntu1?arch=source&distro=questing" } } }, { "category": "product_version_range", "name": "vers:unknown/4.98.2-1ubuntu2", "product": { "name": "vers:unknown/4.98.2-1ubuntu2", "product_id": "CSAFPID-6290219", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.98.2-1ubuntu2?arch=source&distro=questing" } } }, { "category": "product_version_range", "name": "vers:unknown/4.98.2-1ubuntu2.1", "product": { "name": "vers:unknown/4.98.2-1ubuntu2.1", "product_id": "CSAFPID-7053157", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.98.2-1ubuntu2.1?arch=source&distro=questing" } } }, { "category": "product_version_range", "name": "vers:unknown/>=0|<4.98.2-1ubuntu2.2", "product": { "name": "vers:unknown/>=0|<4.98.2-1ubuntu2.2", "product_id": "CSAFPID-7053158" } } ], "category": "product_name", "name": "exim4" } ], "category": "product_family", "name": "Ubuntu:25.10" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/4.98.2-1ubuntu2", "product": { "name": "vers:unknown/4.98.2-1ubuntu2", "product_id": "CSAFPID-6290222", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.98.2-1ubuntu2?arch=source&distro=resolute" } } }, { "category": "product_version_range", "name": "vers:unknown/4.99-4ubuntu1", "product": { "name": "vers:unknown/4.99-4ubuntu1", "product_id": "CSAFPID-6290223", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.99-4ubuntu1?arch=source&distro=resolute" } } }, { "category": "product_version_range", "name": "vers:unknown/4.99.1-1ubuntu1", "product": { "name": "vers:unknown/4.99.1-1ubuntu1", "product_id": "CSAFPID-6290224", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.99.1-1ubuntu1?arch=source&distro=resolute" } } }, { "category": "product_version_range", "name": "vers:unknown/4.99.1-1ubuntu1.1", "product": { "name": "vers:unknown/4.99.1-1ubuntu1.1", "product_id": "CSAFPID-7053159", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.99.1-1ubuntu1.1?arch=source&distro=resolute" } } }, { "category": "product_version_range", "name": "vers:unknown/>=0|<4.99.1-1ubuntu1.2", "product": { "name": "vers:unknown/>=0|<4.99.1-1ubuntu1.2", "product_id": "CSAFPID-7053160" } } ], "category": "product_name", "name": "exim4" } ], "category": "product_family", "name": "Ubuntu:26.04" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/4.80-7ubuntu3", "product": { "name": "vers:unknown/4.80-7ubuntu3", "product_id": "CSAFPID-6221971", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.80-7ubuntu3?arch=source&distro=esm-infra-legacy/trusty" } } }, { "category": "product_version_range", "name": "vers:unknown/4.80-7ubuntu4", "product": { "name": "vers:unknown/4.80-7ubuntu4", "product_id": "CSAFPID-6221972", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.80-7ubuntu4?arch=source&distro=esm-infra-legacy/trusty" } } }, { "category": "product_version_range", "name": "vers:unknown/4.80-9ubuntu1", "product": { "name": "vers:unknown/4.80-9ubuntu1", "product_id": "CSAFPID-6221973", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.80-9ubuntu1?arch=source&distro=esm-infra-legacy/trusty" } } }, { "category": "product_version_range", "name": "vers:unknown/4.80-9ubuntu2", "product": { "name": "vers:unknown/4.80-9ubuntu2", "product_id": "CSAFPID-6221974", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.80-9ubuntu2?arch=source&distro=esm-infra-legacy/trusty" } } }, { "category": "product_version_range", "name": "vers:unknown/4.82-3ubuntu1", "product": { "name": "vers:unknown/4.82-3ubuntu1", "product_id": "CSAFPID-6221975", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.82-3ubuntu1?arch=source&distro=esm-infra-legacy/trusty" } } }, { "category": "product_version_range", "name": "vers:unknown/4.82-3ubuntu2", "product": { "name": "vers:unknown/4.82-3ubuntu2", "product_id": "CSAFPID-6221976", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.82-3ubuntu2?arch=source&distro=esm-infra-legacy/trusty" } } }, { "category": "product_version_range", "name": "vers:unknown/4.82-3ubuntu2.1", "product": { "name": "vers:unknown/4.82-3ubuntu2.1", "product_id": "CSAFPID-6221977", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.82-3ubuntu2.1?arch=source&distro=esm-infra-legacy/trusty" } } }, { "category": "product_version_range", "name": "vers:unknown/4.82-3ubuntu2.2", "product": { "name": "vers:unknown/4.82-3ubuntu2.2", "product_id": "CSAFPID-6221978", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.82-3ubuntu2.2?arch=source&distro=esm-infra-legacy/trusty" } } }, { "category": "product_version_range", "name": "vers:unknown/4.82-3ubuntu2.3", "product": { "name": "vers:unknown/4.82-3ubuntu2.3", "product_id": "CSAFPID-6221979", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.82-3ubuntu2.3?arch=source&distro=esm-infra-legacy/trusty" } } }, { "category": "product_version_range", "name": "vers:unknown/4.82-3ubuntu2.4", "product": { "name": "vers:unknown/4.82-3ubuntu2.4", "product_id": "CSAFPID-6221980", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.82-3ubuntu2.4?arch=source&distro=esm-infra-legacy/trusty" } } }, { "category": "product_version_range", "name": "vers:unknown/4.82-3ubuntu2.4+esm1", "product": { "name": "vers:unknown/4.82-3ubuntu2.4+esm1", "product_id": "CSAFPID-6221981", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.82-3ubuntu2.4%2Besm1?arch=source&distro=esm-infra-legacy/trusty" } } }, { "category": "product_version_range", "name": "vers:unknown/4.82-3ubuntu2.4+esm2", "product": { "name": "vers:unknown/4.82-3ubuntu2.4+esm2", "product_id": "CSAFPID-6221982", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.82-3ubuntu2.4%2Besm2?arch=source&distro=esm-infra-legacy/trusty" } } }, { "category": "product_version_range", "name": "vers:unknown/4.82-3ubuntu2.4+esm3", "product": { "name": "vers:unknown/4.82-3ubuntu2.4+esm3", "product_id": "CSAFPID-6221983", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.82-3ubuntu2.4%2Besm3?arch=source&distro=esm-infra-legacy/trusty" } } }, { "category": "product_version_range", "name": "vers:unknown/4.82-3ubuntu2.4+esm4", "product": { "name": "vers:unknown/4.82-3ubuntu2.4+esm4", "product_id": "CSAFPID-6221984", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.82-3ubuntu2.4%2Besm4?arch=source&distro=esm-infra-legacy/trusty" } } }, { "category": "product_version_range", "name": "vers:unknown/4.82-3ubuntu2.4+esm6", "product": { "name": "vers:unknown/4.82-3ubuntu2.4+esm6", "product_id": "CSAFPID-6221985", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.82-3ubuntu2.4%2Besm6?arch=source&distro=esm-infra-legacy/trusty" } } }, { "category": "product_version_range", "name": "vers:unknown/4.82-3ubuntu2.4+esm7", "product": { "name": "vers:unknown/4.82-3ubuntu2.4+esm7", "product_id": "CSAFPID-6221986", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.82-3ubuntu2.4%2Besm7?arch=source&distro=esm-infra-legacy/trusty" } } }, { "category": "product_version_range", "name": "vers:unknown/4.82-3ubuntu2.4+esm8", "product": { "name": "vers:unknown/4.82-3ubuntu2.4+esm8", "product_id": "CSAFPID-6221987", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.82-3ubuntu2.4%2Besm8?arch=source&distro=esm-infra-legacy/trusty" } } }, { "category": "product_version_range", "name": "vers:unknown/>=0", "product": { "name": "vers:unknown/>=0", "product_id": "CSAFPID-6221988" } } ], "category": "product_name", "name": "exim4" } ], "category": "product_family", "name": "Ubuntu:Pro:14.04:LTS" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/4.86-3ubuntu1", "product": { "name": "vers:unknown/4.86-3ubuntu1", "product_id": "CSAFPID-6290073", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.86-3ubuntu1?arch=source&distro=esm-infra/xenial" } } }, { "category": "product_version_range", "name": "vers:unknown/4.86-7ubuntu1", "product": { "name": "vers:unknown/4.86-7ubuntu1", "product_id": "CSAFPID-6290074", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.86-7ubuntu1?arch=source&distro=esm-infra/xenial" } } }, { "category": "product_version_range", "name": "vers:unknown/4.86-7ubuntu2", "product": { "name": "vers:unknown/4.86-7ubuntu2", "product_id": "CSAFPID-6290075", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.86-7ubuntu2?arch=source&distro=esm-infra/xenial" } } }, { "category": "product_version_range", "name": "vers:unknown/4.86-7ubuntu3", "product": { "name": "vers:unknown/4.86-7ubuntu3", "product_id": "CSAFPID-6290076", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.86-7ubuntu3?arch=source&distro=esm-infra/xenial" } } }, { "category": "product_version_range", "name": "vers:unknown/4.86.2-2ubuntu1", "product": { "name": "vers:unknown/4.86.2-2ubuntu1", "product_id": "CSAFPID-6290077", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.86.2-2ubuntu1?arch=source&distro=esm-infra/xenial" } } }, { "category": "product_version_range", "name": "vers:unknown/4.86.2-2ubuntu2", "product": { "name": "vers:unknown/4.86.2-2ubuntu2", "product_id": "CSAFPID-6290078", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.86.2-2ubuntu2?arch=source&distro=esm-infra/xenial" } } }, { "category": "product_version_range", "name": "vers:unknown/4.86.2-2ubuntu2.1", "product": { "name": "vers:unknown/4.86.2-2ubuntu2.1", "product_id": "CSAFPID-6290079", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.86.2-2ubuntu2.1?arch=source&distro=esm-infra/xenial" } } }, { "category": "product_version_range", "name": "vers:unknown/4.86.2-2ubuntu2.2", "product": { "name": "vers:unknown/4.86.2-2ubuntu2.2", "product_id": "CSAFPID-6290080", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.86.2-2ubuntu2.2?arch=source&distro=esm-infra/xenial" } } }, { "category": "product_version_range", "name": "vers:unknown/4.86.2-2ubuntu2.3", "product": { "name": "vers:unknown/4.86.2-2ubuntu2.3", "product_id": "CSAFPID-6290081", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.86.2-2ubuntu2.3?arch=source&distro=esm-infra/xenial" } } }, { "category": "product_version_range", "name": "vers:unknown/4.86.2-2ubuntu2.4", "product": { "name": "vers:unknown/4.86.2-2ubuntu2.4", "product_id": "CSAFPID-6290082", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.86.2-2ubuntu2.4?arch=source&distro=esm-infra/xenial" } } }, { "category": "product_version_range", "name": "vers:unknown/4.86.2-2ubuntu2.5", "product": { "name": "vers:unknown/4.86.2-2ubuntu2.5", "product_id": "CSAFPID-6290083", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.86.2-2ubuntu2.5?arch=source&distro=esm-infra/xenial" } } }, { "category": "product_version_range", "name": "vers:unknown/4.86.2-2ubuntu2.6", "product": { "name": "vers:unknown/4.86.2-2ubuntu2.6", "product_id": "CSAFPID-6290084", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.86.2-2ubuntu2.6?arch=source&distro=esm-infra/xenial" } } }, { "category": "product_version_range", "name": "vers:unknown/4.86.2-2ubuntu2.6+esm1", "product": { "name": "vers:unknown/4.86.2-2ubuntu2.6+esm1", "product_id": "CSAFPID-6290085", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.86.2-2ubuntu2.6%2Besm1?arch=source&distro=esm-infra/xenial" } } }, { "category": "product_version_range", "name": "vers:unknown/4.86.2-2ubuntu2.6+esm2", "product": { "name": "vers:unknown/4.86.2-2ubuntu2.6+esm2", "product_id": "CSAFPID-6290086", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.86.2-2ubuntu2.6%2Besm2?arch=source&distro=esm-infra/xenial" } } }, { "category": "product_version_range", "name": "vers:unknown/4.86.2-2ubuntu2.6+esm4", "product": { "name": "vers:unknown/4.86.2-2ubuntu2.6+esm4", "product_id": "CSAFPID-6290087", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.86.2-2ubuntu2.6%2Besm4?arch=source&distro=esm-infra/xenial" } } }, { "category": "product_version_range", "name": "vers:unknown/4.86.2-2ubuntu2.6+esm5", "product": { "name": "vers:unknown/4.86.2-2ubuntu2.6+esm5", "product_id": "CSAFPID-6290088", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.86.2-2ubuntu2.6%2Besm5?arch=source&distro=esm-infra/xenial" } } }, { "category": "product_version_range", "name": "vers:unknown/4.86.2-2ubuntu2.6+esm6", "product": { "name": "vers:unknown/4.86.2-2ubuntu2.6+esm6", "product_id": "CSAFPID-6290089", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.86.2-2ubuntu2.6%2Besm6?arch=source&distro=esm-infra/xenial" } } }, { "category": "product_version_range", "name": "vers:unknown/4.86.2-2ubuntu2.6+esm7", "product": { "name": "vers:unknown/4.86.2-2ubuntu2.6+esm7", "product_id": "CSAFPID-6290090", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.86.2-2ubuntu2.6%2Besm7?arch=source&distro=esm-infra/xenial" } } }, { "category": "product_version_range", "name": "vers:unknown/4.86.2-2ubuntu2.6+esm8", "product": { "name": "vers:unknown/4.86.2-2ubuntu2.6+esm8", "product_id": "CSAFPID-6290092", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.86.2-2ubuntu2.6%2Besm8?arch=source&distro=esm-infra/xenial" } } }, { "category": "product_version_range", "name": "vers:unknown/>=0", "product": { "name": "vers:unknown/>=0", "product_id": "CSAFPID-6290093" } } ], "category": "product_name", "name": "exim4" } ], "category": "product_family", "name": "Ubuntu:Pro:16.04:LTS" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/4.89-5ubuntu1", "product": { "name": "vers:unknown/4.89-5ubuntu1", "product_id": "CSAFPID-6290094", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.89-5ubuntu1?arch=source&distro=esm-infra/bionic" } } }, { "category": "product_version_range", "name": "vers:unknown/4.89-9ubuntu1", "product": { "name": "vers:unknown/4.89-9ubuntu1", "product_id": "CSAFPID-6290096", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.89-9ubuntu1?arch=source&distro=esm-infra/bionic" } } }, { "category": "product_version_range", "name": "vers:unknown/4.89-9ubuntu2", "product": { "name": "vers:unknown/4.89-9ubuntu2", "product_id": "CSAFPID-6290097", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.89-9ubuntu2?arch=source&distro=esm-infra/bionic" } } }, { "category": "product_version_range", "name": "vers:unknown/4.89-9ubuntu3", "product": { "name": "vers:unknown/4.89-9ubuntu3", "product_id": "CSAFPID-6290098", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.89-9ubuntu3?arch=source&distro=esm-infra/bionic" } } }, { "category": "product_version_range", "name": "vers:unknown/4.89-9ubuntu4", "product": { "name": "vers:unknown/4.89-9ubuntu4", "product_id": "CSAFPID-6290099", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.89-9ubuntu4?arch=source&distro=esm-infra/bionic" } } }, { "category": "product_version_range", "name": "vers:unknown/4.90.1-1ubuntu1", "product": { "name": "vers:unknown/4.90.1-1ubuntu1", "product_id": "CSAFPID-6290101", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.90.1-1ubuntu1?arch=source&distro=esm-infra/bionic" } } }, { "category": "product_version_range", "name": "vers:unknown/4.90.1-1ubuntu1.1", "product": { "name": "vers:unknown/4.90.1-1ubuntu1.1", "product_id": "CSAFPID-6290104", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.90.1-1ubuntu1.1?arch=source&distro=esm-infra/bionic" } } }, { "category": "product_version_range", "name": "vers:unknown/4.90.1-1ubuntu1.10", "product": { "name": "vers:unknown/4.90.1-1ubuntu1.10", "product_id": "CSAFPID-6290126", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.90.1-1ubuntu1.10?arch=source&distro=esm-infra/bionic" } } }, { "category": "product_version_range", "name": "vers:unknown/4.90.1-1ubuntu1.10+esm1", "product": { "name": "vers:unknown/4.90.1-1ubuntu1.10+esm1", "product_id": "CSAFPID-6290130", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.90.1-1ubuntu1.10%2Besm1?arch=source&distro=esm-infra/bionic" } } }, { "category": "product_version_range", "name": "vers:unknown/4.90.1-1ubuntu1.10+esm2", "product": { "name": "vers:unknown/4.90.1-1ubuntu1.10+esm2", "product_id": "CSAFPID-6290133", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.90.1-1ubuntu1.10%2Besm2?arch=source&distro=esm-infra/bionic" } } }, { "category": "product_version_range", "name": "vers:unknown/4.90.1-1ubuntu1.10+esm3", "product": { "name": "vers:unknown/4.90.1-1ubuntu1.10+esm3", "product_id": "CSAFPID-6290138", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.90.1-1ubuntu1.10%2Besm3?arch=source&distro=esm-infra/bionic" } } }, { "category": "product_version_range", "name": "vers:unknown/4.90.1-1ubuntu1.10+esm4", "product": { "name": "vers:unknown/4.90.1-1ubuntu1.10+esm4", "product_id": "CSAFPID-6290141", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.90.1-1ubuntu1.10%2Besm4?arch=source&distro=esm-infra/bionic" } } }, { "category": "product_version_range", "name": "vers:unknown/4.90.1-1ubuntu1.10+esm5", "product": { "name": "vers:unknown/4.90.1-1ubuntu1.10+esm5", "product_id": "CSAFPID-6290145", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.90.1-1ubuntu1.10%2Besm5?arch=source&distro=esm-infra/bionic" } } }, { "category": "product_version_range", "name": "vers:unknown/4.90.1-1ubuntu1.2", "product": { "name": "vers:unknown/4.90.1-1ubuntu1.2", "product_id": "CSAFPID-6290105", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.90.1-1ubuntu1.2?arch=source&distro=esm-infra/bionic" } } }, { "category": "product_version_range", "name": "vers:unknown/4.90.1-1ubuntu1.3", "product": { "name": "vers:unknown/4.90.1-1ubuntu1.3", "product_id": "CSAFPID-6290106", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.90.1-1ubuntu1.3?arch=source&distro=esm-infra/bionic" } } }, { "category": "product_version_range", "name": "vers:unknown/4.90.1-1ubuntu1.4", "product": { "name": "vers:unknown/4.90.1-1ubuntu1.4", "product_id": "CSAFPID-6290110", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.90.1-1ubuntu1.4?arch=source&distro=esm-infra/bionic" } } }, { "category": "product_version_range", "name": "vers:unknown/4.90.1-1ubuntu1.5", "product": { "name": "vers:unknown/4.90.1-1ubuntu1.5", "product_id": "CSAFPID-6290113", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.90.1-1ubuntu1.5?arch=source&distro=esm-infra/bionic" } } }, { "category": "product_version_range", "name": "vers:unknown/4.90.1-1ubuntu1.8", "product": { "name": "vers:unknown/4.90.1-1ubuntu1.8", "product_id": "CSAFPID-6290117", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.90.1-1ubuntu1.8?arch=source&distro=esm-infra/bionic" } } }, { "category": "product_version_range", "name": "vers:unknown/4.90.1-1ubuntu1.9", "product": { "name": "vers:unknown/4.90.1-1ubuntu1.9", "product_id": "CSAFPID-6290121", "product_identification_helper": { "purl": "pkg:deb/ubuntu/exim4@4.90.1-1ubuntu1.9?arch=source&distro=esm-infra/bionic" } } }, { "category": "product_version_range", "name": "vers:unknown/>=0", "product": { "name": "vers:unknown/>=0", "product_id": "CSAFPID-6290148" } } ], "category": "product_name", "name": "exim4" } ], "category": "product_family", "name": "Ubuntu:Pro:18.04:LTS" } ], "category": "vendor", "name": "Ubuntu" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-45185", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing path. It is triggered when a client sends a TLS close_notify mid-body during a CHUNKING transfer, followed by a final cleartext byte on the same TCP connection. This can lead to heap corruption. An unauthenticated network attacker exploiting this vulnerability could execute arbitrary code.", "title": "nvd - https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-45185" }, { "category": "description", "text": "Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing path. It is triggered when a client sends a TLS close_notify mid-body during a CHUNKING transfer, followed by a final cleartext byte on the same TCP connection. This can lead to heap corruption. An unauthenticated network attacker exploiting this vulnerability could execute arbitrary code.", "title": "cveprojectv5 - https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45185.json" }, { "category": "description", "text": "Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing path. It is triggered when a client sends a TLS close_notify mid-body during a CHUNKING transfer, followed by a final cleartext byte on the same TCP connection. This can lead to heap corruption. An unauthenticated network attacker exploiting this vulnerability could execute arbitrary code.", "title": "debian - https://security-tracker.debian.org/tracker/CVE-2026-45185" }, { "category": "description", "text": "A remotely reachable Use-After-Free (UAF) vulnerability has been identified in Exim's BDAT (binary data transmission) body parsing path when using the GnuTLS backend. This vulnerability can lead to heap corruption and potential code execution.", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Ubuntu%2FUBUNTU-CVE-2026-45185.json?alt=media" }, { "category": "other", "text": "0.00059", "title": "EPSS" }, { "category": "other", "text": "4.8", "title": "NCSC Score" }, { "category": "other", "text": "There is news data available from source Bleepingcomputer, There is product data available from source Certbundde", "title": "NCSC Score top increasing factors" }, { "category": "other", "text": "Is related to a product by vendor Ubuntu, Is related to (a version of) an uncommon product", "title": "NCSC Score top decreasing factors" } ], "product_status": { "first_fixed": [ "CSAFPID-6981639", "CSAFPID-6982637" ], "known_affected": [ "CSAFPID-6982043", "CSAFPID-1295663", "CSAFPID-1330299", "CSAFPID-6984088", "CSAFPID-6221971", "CSAFPID-6221972", "CSAFPID-6221973", "CSAFPID-6221974", "CSAFPID-6221975", "CSAFPID-6221976", "CSAFPID-6221977", "CSAFPID-6221978", "CSAFPID-6221979", "CSAFPID-6221980", "CSAFPID-6221981", "CSAFPID-6221982", "CSAFPID-6221983", "CSAFPID-6221984", "CSAFPID-6221985", "CSAFPID-6221986", "CSAFPID-6221987", "CSAFPID-6221988", "CSAFPID-6290073", "CSAFPID-6290074", "CSAFPID-6290075", "CSAFPID-6290076", "CSAFPID-6290077", "CSAFPID-6290078", "CSAFPID-6290079", "CSAFPID-6290080", "CSAFPID-6290081", "CSAFPID-6290082", "CSAFPID-6290083", "CSAFPID-6290084", "CSAFPID-6290085", "CSAFPID-6290086", "CSAFPID-6290087", "CSAFPID-6290088", "CSAFPID-6290089", "CSAFPID-6290090", "CSAFPID-6290092", "CSAFPID-6290093", "CSAFPID-6290094", "CSAFPID-6290096", "CSAFPID-6290097", "CSAFPID-6290098", "CSAFPID-6290099", "CSAFPID-6290101", "CSAFPID-6290104", "CSAFPID-6290105", "CSAFPID-6290106", "CSAFPID-6290110", "CSAFPID-6290113", "CSAFPID-6290117", "CSAFPID-6290121", "CSAFPID-6290126", "CSAFPID-6290130", "CSAFPID-6290133", "CSAFPID-6290138", "CSAFPID-6290141", "CSAFPID-6290145", "CSAFPID-6290148", "CSAFPID-6290151", "CSAFPID-6290152", "CSAFPID-6290157", "CSAFPID-6290161", "CSAFPID-6290163", "CSAFPID-6290164", "CSAFPID-6290165", "CSAFPID-6290167", "CSAFPID-6290171", "CSAFPID-6290175", "CSAFPID-6290176", "CSAFPID-6290177", "CSAFPID-6290178", "CSAFPID-6290182", "CSAFPID-6290187", "CSAFPID-6290190", "CSAFPID-6290191", "CSAFPID-6290193", "CSAFPID-6290194", "CSAFPID-6290195", "CSAFPID-6290196", "CSAFPID-6290198", "CSAFPID-6290199", "CSAFPID-6290200", "CSAFPID-6290201", "CSAFPID-6290202", "CSAFPID-6290203", "CSAFPID-6290205", "CSAFPID-6290206", "CSAFPID-6290207", "CSAFPID-6290208", "CSAFPID-6290209", "CSAFPID-6290210", "CSAFPID-6290211", "CSAFPID-6290214", "CSAFPID-6290215", "CSAFPID-6290217", "CSAFPID-6290218", "CSAFPID-6290219", "CSAFPID-6290222", "CSAFPID-6290223", "CSAFPID-6290224", "CSAFPID-7053153", "CSAFPID-7053154", "CSAFPID-7053155", "CSAFPID-7053156", "CSAFPID-7053157", "CSAFPID-7053158", "CSAFPID-7053159", "CSAFPID-7053160" ] }, "references": [ { "category": "external", "summary": "Source - nvd", "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-45185" }, { "category": "external", "summary": "Source - cveprojectv5", "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45185.json" }, { "category": "external", "summary": "Source - hkcert", "url": "https://www.hkcert.org/security-bulletin/exim-remote-code-execution-vulnerability_20260513" }, { "category": "external", "summary": "Source - debian", "url": "https://security-tracker.debian.org/tracker/CVE-2026-45185" }, { "category": "external", "summary": "Source - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1505.json" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Ubuntu%2FUBUNTU-CVE-2026-45185.json?alt=media" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0" }, { "category": "external", "summary": "Source - bleepingcomputer", "url": "https://www.bleepingcomputer.com/news/security/new-critical-exim-mailer-flaw-allows-remote-code-execution/" }, { "category": "external", "summary": "Source - securitynl", "url": "https://www.security.nl/posting/936748/Kritiek+Exim-lek+maakt+remote+code+execution+op+mailserver+mogelijk?channel=rss" }, { "category": "external", "summary": "Source - ncscclear", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0163" }, { "category": "external", "summary": "News - bleepingcomputer", "url": "https://www.bleepingcomputer.com/news/security/new-critical-exim-mailer-flaw-allows-remote-code-execution/" }, { "category": "external", "summary": "News - securitynl", "url": "https://www.security.nl/posting/936748/Kritiek+Exim-lek+maakt+remote+code+execution+op+mailserver+mogelijk?channel=rss" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd", "url": "https://code.exim.org/exim/wiki/wiki/EximSecurity" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd", "url": "https://exim.org/" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd", "url": "https://exim.org/static/doc/security/CVE-2026-45185.txt" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd", "url": "https://exim.org/static/doc/security/EXIM-Security-2026-05-01.1/" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd", "url": "https://news.ycombinator.com/item?id=48111748" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd", "url": "https://www.openwall.com/lists/oss-security/2026/05/12/4" }, { "category": "external", "summary": "Reference - certbundde; cveprojectv5; nvd; osv", "url": "https://xbow.com/blog/dead-letter-cve-2026-45185-xbow-found-rce-exim" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd", "url": "http://www.openwall.com/lists/oss-security/2026/05/12/25" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1505.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1505" }, { "category": "external", "summary": "Reference - certbundde; osv", "url": "https://ubuntu.com/security/notices/USN-8270-1" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.debian.org/debian-lts-announce/2026/05/msg00024.html" }, { "category": "external", "summary": "Reference - osv", "url": "https://ubuntu.com/security/CVE-2026-45185" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.cve.org/CVERecord?id=CVE-2026-45185" }, { "category": "external", "summary": "Reference - osv", "url": "https://exim.org/static/doc/security/EXIM-Security-2026-05-01.1/EXIM-Security-2026-05-01.1.txt" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL" }, "products": [ "CSAFPID-1295663", "CSAFPID-1330299", "CSAFPID-6221971", "CSAFPID-6221972", "CSAFPID-6221973", "CSAFPID-6221974", "CSAFPID-6221975", "CSAFPID-6221976", "CSAFPID-6221977", "CSAFPID-6221978", "CSAFPID-6221979", "CSAFPID-6221980", "CSAFPID-6221981", "CSAFPID-6221982", "CSAFPID-6221983", "CSAFPID-6221984", "CSAFPID-6221985", "CSAFPID-6221986", "CSAFPID-6221987", "CSAFPID-6221988", "CSAFPID-6290073", "CSAFPID-6290074", "CSAFPID-6290075", "CSAFPID-6290076", "CSAFPID-6290077", "CSAFPID-6290078", "CSAFPID-6290079", "CSAFPID-6290080", "CSAFPID-6290081", "CSAFPID-6290082", "CSAFPID-6290083", "CSAFPID-6290084", "CSAFPID-6290085", "CSAFPID-6290086", "CSAFPID-6290087", "CSAFPID-6290088", "CSAFPID-6290089", "CSAFPID-6290090", "CSAFPID-6290092", "CSAFPID-6290093", "CSAFPID-6290094", "CSAFPID-6290096", "CSAFPID-6290097", "CSAFPID-6290098", "CSAFPID-6290099", "CSAFPID-6290101", "CSAFPID-6290104", "CSAFPID-6290105", "CSAFPID-6290106", "CSAFPID-6290110", "CSAFPID-6290113", "CSAFPID-6290117", "CSAFPID-6290121", "CSAFPID-6290126", "CSAFPID-6290130", "CSAFPID-6290133", "CSAFPID-6290138", "CSAFPID-6290141", "CSAFPID-6290145", "CSAFPID-6290148", "CSAFPID-6290151", "CSAFPID-6290152", "CSAFPID-6290157", "CSAFPID-6290161", "CSAFPID-6290163", "CSAFPID-6290164", "CSAFPID-6290165", "CSAFPID-6290167", "CSAFPID-6290171", "CSAFPID-6290175", "CSAFPID-6290176", "CSAFPID-6290177", "CSAFPID-6290178", "CSAFPID-6290182", "CSAFPID-6290187", "CSAFPID-6290190", "CSAFPID-6290191", "CSAFPID-6290193", "CSAFPID-6290194", "CSAFPID-6290195", "CSAFPID-6290196", "CSAFPID-6290198", "CSAFPID-6290199", "CSAFPID-6290200", "CSAFPID-6290201", "CSAFPID-6290202", "CSAFPID-6290203", "CSAFPID-6290205", "CSAFPID-6290206", "CSAFPID-6290207", "CSAFPID-6290208", "CSAFPID-6290209", "CSAFPID-6290210", "CSAFPID-6290211", "CSAFPID-6290214", "CSAFPID-6290215", "CSAFPID-6290217", "CSAFPID-6290218", "CSAFPID-6290219", "CSAFPID-6290222", "CSAFPID-6290223", "CSAFPID-6290224", "CSAFPID-6982043", "CSAFPID-6984088", "CSAFPID-7053153", "CSAFPID-7053154", "CSAFPID-7053155", "CSAFPID-7053156", "CSAFPID-7053157", "CSAFPID-7053158", "CSAFPID-7053159", "CSAFPID-7053160" ] } ], "title": "CVE-2026-45185" } ] }