NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

Vulnerability3 · 1 read

CVE-2019-15846

CVSS 3.0: 9.8 critical
EPSS: 36%p98
Published: Sep 6, 2019 · Sep 6, 2019
Modified: Jun 17, 2026

Analyze CVE-2019-15846 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Exim before 4.92.2 allows remote attackers to execute arbitrary code as root via a trailing backslash.

Vendors: exim debian

Products: exim, debian linux

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (35.7%)

In the news

9 stories

Most of Exim email servers could be hacked by exploiting 21Nails flaws

Security AffairsMay 4, 17:10 UTC · May 4, 2021VulnerabilityCVE-2020-28007 CVE-2020-28008 CVE-2020-28014+213 · 1 read

60

Russia-linked APT exploited at least 3 Exim flaws in recent attacks

Security AffairsJun 3, 07:57 UTC · Jun 3, 2020VulnerabilityCVE-2019-10149 CVE-2019-15846 CVE-2019-169282 · 2 reads

60

New Critical Exim Flaw Exposes Email Servers to Remote Attacks — Patch Released

The Hacker NewsSep 30, 15:33 UTC · Sep 30, 2019VulnerabilityExploitedCVE-2019-15846 CVE-2019-16928 CVE-2019-101491

60

A new critical flaw in Exim exposes email servers to remote attacks

Security AffairsSep 30, 14:40 UTC · Sep 30, 2019Exploit / PoCExploitedCVE-2019-16928 CVE-2019-15846 CVE-2019-101494

60

Critical Exim flaw opens servers to remote code execution, patch now!

Help Net SecuritySep 9, 00:00 UTC · Sep 9, 2019VulnerabilityCVE-2019-15846 CVE-2019-101492 · 1 read

60

CVE-2019-15846 Exim mail server flaw allows Remote Code Execution

Security AffairsSep 6, 16:00 UTC · Sep 6, 2019VulnerabilityCVE-2019-15846 CVE-2019-101492

60

Exim TLS Flaw Opens Email Servers to Remote 'Root' Code Execution Attacks

The Hacker NewsSep 6, 12:48 UTC · Sep 6, 2019Exploit / PoCExploitedCVE-2019-15846 CVE-2019-101493 · 1 read

60

21Nails vulnerabilities impact 60% of the internet's email servers

The RecordDec 7, 00:00 UTC · Dec 7, 2022VulnerabilityCVE-2020-28007 CVE-2020-28008 CVE-2020-28014+214 · 1 read

47

Assessing the email security controls used by 10,000 U.S. state and local election administrators

Help Net SecurityNov 14, 09:16 UTC · Nov 14, 2023VulnerabilityCVE-2019-10149 CVE-2019-15846 CVE-2019-169282 · 1 read

35