CVE-2026-94056

score

0.4

cvss

7.5

epss

0.2%

published

2026-09-19

kev added

—

first seen

2026-10-21

Exim < 4.100.1 contains an information disclosure vulnerability caused by uninitialized stack memory read when Proxy-Protocol is used with an attacker-controlled proxy, letting attackers read sensitive data, exploit requires attacker-controlled proxy.