References https://nvd.nist.gov/vuln/detail/CVE-2025-67896 https://www.sentinelone.com/vulnerability-database/cve-2025-67896/ https://github.com/advisories/GHSA-6qxw-x3vc-phrg https://www.tenable.com/plugins/nessus/278629 https://www.rapid7.com/db/vulnerabilities/exim-cve-2025-67896/ https://access.redhat.com/security/cve/cve-2025-67896 https://seclists.org/oss-sec/2025/q4/287 https://security-tracker.debian.org/tracker/CVE-2025-67896 https://exim.org/static/doc/security/EXIM-Security-2025-12-09.1/report.txt https://www.finra.org/rules-guidance/guidance/cybersecurity-alert-exim-mail-vulnerabilities-could-allow-unauthorized
Related VulnerabilitiesPoCCVE-2020-29134: TOTVS Fluig <= 1.7.0 - Arbitrary File ReadPoCCVE-2023-54391: Proxmox VE - Default Credentials with TFA BypassPoCCVE-2026-0702: VidShop for WooCommerce <= 1.1.4 - SQL InjectionPoCCVE-2026-19092: Tutor LMS < 4.0.6 - Unauthenticated Arbitrary PHP Function InvocationPoCCVE-2026-27454: Discourse <=2026.2.0 - Hidden Post Revision Disclosure via revert_to Authorization BypassPoCCVE-2026-28141: NextGEN Gallery <= 4.2.3 - Reflected Cross-Site ScriptingPoCCVE-2026-28411: WeGIA < 3.6.5 - Unauthenticated Authentication Bypass via extract()PoCCVE-2026-30849: MantisBT < 2.28.1 - SOAP API Authentication BypassPoCCVE-2026-34234: CtrlPanel <= 1.1.1 - Remote Code ExecutionPoCCVE-2026-41452: Krayin CRM < 2.2.1 - Installer Authentication BypassPoCCVE-2026-41456: Bludit CMS <= 3.20.0 - Cross-Site ScriptingPoCCVE-2026-41679: Paperclip - Remote Code ExecutionPoCCVE-2026-41948: Dify <=1.14.1 - Unauthenticated Plugin Daemon Path Traversal