CVE-2026-45185 2

Vulnerability (CVE)

New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Execution

Exim released security updates for CVE-2026-45185, a use-after-free flaw in BDAT message body parsing rated CVSS 9.8 and nicknamed Dead.Letter, affecting versions 4.97 through 4.99.2 built with USE_GNUTLS=yes. Triggered when a client sends a TLS...

Vulnerabilities & Patching

⚡ Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and More

Cyber Risks The Hacker News

Microsoft disclosed CVE-2026-42897, a spoofing bug stemming from a cross-site scripting flaw with a CVSS score of 8.1 affecting on-premise Exchange Server, which is under active exploitation in the wild. Microsoft is offering a temporary mitigation through...

Vulnerabilities & Patching