Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.3
Exim mail server can be used to send unauthorized email
published 1 month ago
Summary
The Exim mail server package from cleanstart is vulnerable to misuse that could let attackers send email on your behalf. This can lead to spam being sent from your system and damage your reputation. Upgrade to the latest Exim version as soon as possible and verify that your mail server is patched.
What to do
- Update cleanstart exim to version 4.94.2-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | exim |
< 4.94.2-r0 Fix: upgrade to 4.94.2-r0
|
Original advisory text
Exim 4 before 4
Security vulnerability affects the exim package. Exim 4 before 4.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published1 Oct 2026
Updated1 Oct 2026
First seen1 Oct 2026
Sources
CLEANSTART-2025-CS68584 · OSV
Track software like this
Free during beta