What is GHSA-wgrp-2w9f-fmvg?

GHSA-wgrp-2w9f-fmvg is a security advisory published by GitHub Security Advisories with Medium severity. Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading...

Which CVE IDs does GHSA-wgrp-2w9f-fmvg cover?

GHSA-wgrp-2w9f-fmvg covers the following CVE IDs: CVE-2026-48840. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-wgrp-2w9f-fmvg?

GHSA-wgrp-2w9f-fmvg has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-wgrp-2w9f-fmvgMediumCVSS 5.3

Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading...

Vendor

GitHub Security Advisories

Published

May 30, 2026

Last Modified

May 30, 2026

🔗 CVE IDs covered (1)

CVE-2026-48840 →

📋 Description

Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of uninitialized stack memory values to a client.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-48840
https://exim.org/static/doc/security/EXIM-Security-2026-05-19.1
https://www.openwall.com/lists/oss-security/2026/05/29/3
https://github.com/advisories/GHSA-wgrp-2w9f-fmvg