MEDIUMVulnerability
Global

New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Execution

·Source: The Hacker News

Updated:

Executive Summary

Exim has released security updates to address a severe security issue affecting certain configurations that could enable memory corruption and potential code execution. Exim is an open-source Mail Transfer Agent (MTA) designed for Unix-like systems to receive, route, and deliver email. The vulnerability, tracked as CVE-2026-45185, aka Dead.Letter, has been described as a use-after-free

Analysis

Exim has released security updates to address a severe security issue affecting certain configurations that could enable memory corruption and potential code execution. Exim is an open-source Mail Transfer Agent (MTA) designed for Unix-like systems to receive, route, and deliver email. The vulnerability, tracked as CVE-2026-45185, aka Dead.Letter, has been described as a use-after-free

Indicators of Compromise (1)

CVE (1)
CVE-2026-45185
NVDMITRE CVE
Source Attribution

Originally published by The Hacker News on May 12, 2026.

Related Threats

CRITICALAi

Human oversight is still critical as AI patching tools miss security risks

AI-generated vulnerability patches still heavily depend on human review, particularly the ones involving security-sensitive code, according to a research. Researchers from 1Password have disclosed an internal evaluation that found AI-generated fixes frequently overlook broader concerns such as architectural intent, business requirements, security implications, and long-term maintainability, despit

CVE-2026-31431CVE-2026-34197
CSO Online
MEDIUMVulnerability

Dead.Letter (CVE-2026-45185) How XBOW found an unauthenticated RCE on Exim

[object Object]

CVE-2026-45185
r/netsec
MEDIUMVulnerability

PhotonPay raises $40m for stablecoin-centric financial OS

Stablecoin-centric financial operating system PhotonPay has raised $40 million in a Series C funding round led by Blockchain Capital.

Finextra