Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.

Low CVSS 3.7

CVECVE-2026-94055

First seen2026-09-20 00:16 UTC

Disclosed2026-09-19 23:17 UTC

Last updated2026-09-20 00:16 UTC

Channel statusauto

Summary

Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).