Exim MTA Security Update Addresses CVE-2026-45185 Memory Corruption Vulnerability
Apply the Exim security patch to fix CVE-2026-45185.
Apply the Exim security patch immediately to mitigate CVE-2026-45185.
Summary
Exim, the open-source Mail Transfer Agent for Unix-like systems, has released a security update to address CVE-2026-45185. The vulnerability, scored 9.8 on CVSS, can cause memory corruption that may lead to arbitrary code execution. It affects certain configurations of Exim that allow attackers to corrupt memory and potentially run malicious code. The update is now available and should be applied immediately to mitigate the risk. No additional exploitation reports have been documented yet, but the severity warrants urgent action. Site administrators using Exim must install the patch as soon as possible to protect their mail infrastructure.
Key changes
- CVE-2026-45185 identified in Exim MTA
- CVSS score 9.8
- Causes memory corruption leading to potential code execution
- Exim is open-source MTA for Unix-like systems
- Security update released to address the issue
- Requires immediate patch
- No CVE ID assigned yet