PatchTheCVE: Eximhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2026-94057: Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and ihttps://patchthecve.com/cve/CVE-2026-94057.htmlhttps://patchthecve.com/cve/CVE-2026-94057.htmlThu, 24 Sep 2026 20:40:10 +0000MEDIUM 4.0: Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing.CVE-2026-94056: Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read chttps://patchthecve.com/cve/CVE-2026-94056.htmlhttps://patchthecve.com/cve/CVE-2026-94056.htmlThu, 24 Sep 2026 20:45:30 +0000HIGH 7.5: Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory.CVE-2026-94055: Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.https://patchthecve.com/cve/CVE-2026-94055.htmlhttps://patchthecve.com/cve/CVE-2026-94055.htmlThu, 24 Sep 2026 20:45:59 +0000LOW 3.7: Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.CVE-2026-94054: Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds writehttps://patchthecve.com/cve/CVE-2026-94054.htmlhttps://patchthecve.com/cve/CVE-2026-94054.htmlThu, 24 Sep 2026 20:47:34 +0000HIGH 7.0: Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.