> TritonInfoSec News
Home / May 14, 2026 / Story
0
#4 BleepingComputer general May 13, 2026 at 20:23 UTC

New critical Exim mailer flaw allows remote code execution

By Bill Toulas

AI Summary

A critical RCE vulnerability was disclosed in Exim, the widely deployed open-source mail transfer agent, exploitable by unauthenticated remote attackers in certain configurations. Exim powers a large share of internet-facing mail servers, and past critical Exim flaws (e.g., CVE-2019-10149) have been rapidly weaponized by threat actors including nation-state groups. Administrators running vulnerable Exim configurations should prioritize patching immediately given the exposure of internet-facing mail infrastructure.

Read full article → https://www.bleepingcomputer.com/news/security/new…

Relevance score: 86.0/100

# More from May 14

  1. 1
    Microsoft Patches 138 Vulnerabilities, Including DNS and Netlogon RCE Flaws The Hacker News
  2. 2
    Microsoft Patches Critical Zero-Click Outlook Vulnerability Threatening Enterprises SecurityWeek
  3. 3
    Windows BitLocker zero-day gives access to protected drives, PoC released BleepingComputer
  4. 5
    Hundreds of Malicious Packages Force RubyGems to Suspend Registrations SecurityWeek
  5. 6
    Instructure pays ransom after Canvas incident as Congress announces investigation The Record
  6. 7
    Foxconn confirms cyberattack claimed by Nitrogen ransomware gang BleepingComputer
  7. 8
    Android Adds Intrusion Logging for Sophisticated Spyware Forensics The Hacker News
  8. 9
    Fortinet, Ivanti Patch Critical Vulnerabilities SecurityWeek
  9. 10
    Azerbaijani Energy Firm Hit by Repeated Microsoft Exchange Exploitation The Hacker News