CVE-2020-28024

score

<0.1

cvss

9.8

epss

4.2%

published

2021-05-06

kev added

—

first seen

2026-10-21

Exim 4 < 4.94.2 contains a buffer underwrite caused by smtp_ungetc pushing back non-character error codes, letting unauthenticated remote attackers execute arbitrary commands, exploit requires sending crafted SMTP commands.