Cloudanix VulnDB

CVE-2026-48840

Medium · 5.3

CVSS

5.3

EPSS

0.4%

Published

May 30, 2026

CISA due date

—

The record

Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of uninitialized stack memory values to a client.

Affected packages

Ecosystem Package Introduced Fixed

Related vulnerabilities