Executive Summary

Informations
Name CVE-2025-26794 First vendor Publication 2025-02-21
Vendor Cve Last vendor Modification 2025-02-22

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL injection.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26794

Sources (Detail)

http://www.openwall.com/lists/oss-security/2025/02/19/1
http://www.openwall.com/lists/oss-security/2025/02/21/4
http://www.openwall.com/lists/oss-security/2025/02/21/5
https://bugzilla.suse.com/show_bug.cgi?id=1237424
https://code.exim.org/exim/exim/commit/bfe32b5c6ea033736a26da8421513206db9fe305
https://exim.org
https://github.com/Exim/exim/wiki/EximSecurity
https://github.com/NixOS/nixpkgs/pull/383926
https://github.com/openbsd/ports/commit/584d2c49addce9ca0ae67882cc16969104d7f82d
https://www.exim.org/static/doc/security/CVE-2025-26794.txt
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
Date Informations
2025-02-22 09:20:30
  • Multiple Updates
2025-02-22 00:20:34
  • Multiple Updates
2025-02-21 17:20:29
  • First insertion