ByteOS Network

NVD Vulnerability Details :

CVE-2025-26794

Awaiting Analysis

Source-cve@mitre.org

Published At-21 Feb, 2025 | 13:15

Updated At-22 Feb, 2025 | 01:15

Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL injection.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Type	Version	Base score	Base severity	Vector
Secondary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE ID	Type	Source
CWE-89	Secondary	cve@mitre.org

Hyperlink	Source	Resource
https://bugzilla.suse.com/show_bug.cgi?id=1237424	cve@mitre.org	N/A
https://code.exim.org/exim/exim/commit/bfe32b5c6ea033736a26da8421513206db9fe305	cve@mitre.org	N/A
https://exim.org	cve@mitre.org	N/A
https://github.com/Exim/exim/wiki/EximSecurity	cve@mitre.org	N/A
https://github.com/NixOS/nixpkgs/pull/383926	cve@mitre.org	N/A
https://github.com/openbsd/ports/commit/584d2c49addce9ca0ae67882cc16969104d7f82d	cve@mitre.org	N/A
https://www.exim.org/static/doc/security/CVE-2025-26794.txt	cve@mitre.org	N/A
http://www.openwall.com/lists/oss-security/2025/02/19/1	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.openwall.com/lists/oss-security/2025/02/21/4	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.openwall.com/lists/oss-security/2025/02/21/5	af854a3a-2127-422b-91ae-364da2661108	N/A