CVE-2026-94057

Exim versions prior to 4.100.1 are vulnerable to SMTP smuggling attacks, where an attacker can manipulate the message flow such that the received message diverges from the sent message, exploiting crafted data sent post-rejection during the DATA processing phase. This vulnerability could lead to unauthorized message delivery or data leakage, making it critical for organizations using affected versions of Exim to prioritize patching. System administrators and security teams managing email servers should address this issue promptly to mitigate potential exploitation risks.