CyberRota
Back to database

CVE-2026-40687

MEDIUM · CVSS 4.8 EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published: 2026-04-30 · Last synced: 2026-05-30

CyberRota Analysis

Bellek tüketimine neden olabilir.

CVE
CVE-2026-40687
Severity
MEDIUM
CVSS
4.8
EPSS
0.17%

Original NVD Description

In Exim before 4.99.2, when the SPA authentication driver is used with an adversarial SPA resource, there can be an out-of-bounds write that crashes the connection instance, or erroneous data processing that divulges data from uninitialized heap memory.