CVE-2025-26794
CRITICALCVSS 9.8/10EPSS 75.78%
Last modified
CVE-2025-26794 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL injection. (Resolving SQL injection requires an update to 4.99.1 in certain non-default rate-limit configurations.). EPSS estimates a 75.78% chance of exploitation in the next 30 days.
Description
Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL injection. (Resolving SQL injection requires an update to 4.99.1 in certain non-default rate-limit configurations.)
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Exim | Exim | >= 4.98, < 4.98.1 |
References
- https://bugzilla.suse.com/show_bug.cgi?id=1237424Issue Tracking, Third Party Advisory
- https://exim.orgProduct
- https://github.com/Exim/exim/wiki/EximSecurityVendor Advisory
- https://github.com/NixOS/nixpkgs/pull/383926Release Notes
- https://www.exim.org/static/doc/security/CVE-2025-26794.txtVendor Advisory
- http://www.openwall.com/lists/oss-security/2025/02/19/1Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2025/02/21/4Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2025/02/21/5Mailing List, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2025-26794?
Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL injection. (Resolving SQL injection requires an update to 4.99.1 in certain non-default rate-limit configurations.)
How severe is CVE-2025-26794?
CVE-2025-26794 has a CVSS score of 9.8/10 (CRITICAL severity). The EPSS model estimates a 75.78% probability of exploitation in the next 30 days.
How do I fix CVE-2025-26794?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-26787An error in the SignServer container startup logic was found…4.7
- CVE-2025-26788StrongKey FIDO Server before 4.15.1 treats a non-discoverabl…8.4
- CVE-2025-26789An issue was discovered in Logpoint AgentX before 1.5.0. A v…6.9
- CVE-2025-2679A vulnerability was found in PHPGurukul Bank Locker Manageme…9.8
- CVE-2025-26791DOMPurify before 3.2.4 has an incorrect template literal reg…6.1
- CVE-2025-26793The Web GUI configuration panel of Hirsch (formerly Identiv …9.3
- CVE-2025-26795Exposure of Sensitive Information to an Unauthorized Actor, …7.5
- CVE-2025-26796** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of I…5.4
- CVE-2025-2680A vulnerability was found in PHPGurukul Bank Locker Manageme…9.8
- CVE-2025-26803The http parser in Phusion Passenger 6.0.21 through 6.0.25 b…7.5
- CVE-2025-2681A vulnerability was found in PHPGurukul Bank Locker Manageme…9.8
- CVE-2025-26816A vulnerability in Intrexx Portal Server 12.0.2 and earlier …6.5
Are you affected by CVE-2025-26794?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST