Skip to content
cyberMEDIUM2026-04-30 22:16 UTC

CVE-2026-40687 - Exim SPA Authentication Driver Uninitialized Memory Disclosure

CVE ID :CVE-2026-40687 Published : April 30, 2026, 10:16 p.m. | 1 hour, 45 minutes ago Description :In Exim before 4.99.2, when the SPA authentication driver is used with an adversarial SPA resource, there can be an out-of-bounds write that crashes the connection instance, or erroneous data pr

ORIGINAL SOURCE →via CVE Feed Latest
ADVERTISEMENT
⚡ STAY AHEAD

Events like this, convergence-verified across 689 sources, land in your inbox every Sunday. Free.

GET THE SUNDAY BRIEFING →

RELATED · cyber