Exim
eximcounted 2026-10-05 16:20 UTC
As of 2026-10-05, 11 278 hosts ran Exim with at least one known CVE on a service open at their latest check, across 57 versions with CVEs; 69 distinct CVEs.
Known CVEs on hosts running it
11 278hosts with known CVEs
69distinct CVEs
57versions with CVEs
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version.
Not counted: 6 479 hosts with CVEs of it only from an older observation (software reported earlier, no service of that kind open now).
Versions with known CVEs
| Version | Hosts with CVEs | CVEs |
|---|---|---|
| 4.99 | 1 304 | 12 |
| 4.98.2 | 1 213 | 12 |
| 4.99.4 | 1 112 | 5 |
| 4.95 | 810 | 20 |
| 4.99.5 | 770 | 4 |
| 4.99.1 | 625 | 11 |
| 4.96 | 598 | 20 |
| 4.97.1 | 545 | 13 |
| 4.97 | 505 | 14 |
| 4.98 | 460 | 14 |
| 4.93 | 390 | 43 |
| 4.94.2 | 386 | 21 |
| 4.99.2 | 331 | 7 |
| 4.98.1 | 328 | 13 |
| 4.92 | 272 | 46 |
| 4.96.2 | 243 | 15 |
| 4.89 | 203 | 50 |
| 4.94 | 196 | 41 |
| 4.96-58-g4e9ed49f8 | 185 | 11 |
| 4.90 | 153 | 48 |
| 4.92.3 | 129 | 43 |
| 4.99.3 | 112 | 6 |
| 4.100 | 70 | 4 |
| 4.96.1 | 67 | 17 |
| 4.96.2-12-g29d01ae2a | 66 | 11 |
| 4.86 | 63 | 47 |
| 4.90_1 | 61 | 47 |
| 4.80 | 60 | 47 |
| 4.93.0.4 | 51 | 42 |
| 4.84 | 44 | 46 |
| 4.87 | 40 | 47 |
| 4.91 | 35 | 47 |
| 4.92.2 | 34 | 44 |
| 4.72 | 22 | 51 |
| 4.82 | 18 | 46 |
| 4.84_2 | 16 | 46 |
| 4.69 | 16 | 52 |
| 4.80.1 | 13 | 46 |
| 4.96.1-7-g79877b70e | 9 | 13 |
| 4.76 | 9 | 47 |
| 4.88 | 8 | 50 |
| 4.92.1 | 7 | 45 |
| 4.86_2 | 6 | 42 |
| 4.63 | 6 | 52 |
| 4.73 | 6 | 49 |
| 4.81 | 6 | 46 |
| 4.89_1 | 5 | 43 |
| 4.67 | 5 | 52 |
| 4.83 | 5 | 46 |
| 4.85 | 4 | 47 |
6 more versions were seen only in older observations.
Most common CVEs
| CVE | Hosts |
|---|---|
| CVE-2026-48840 MEDIUM 5.3 | 9 329 |
| CVE-2026-40685 CRITICAL 9.8 | 9 237 |
| CVE-2026-40687 CRITICAL 9.1 | 9 237 |
| CVE-2026-40684 HIGH 7.5 | 9 237 |
| CVE-2026-40686 MEDIUM 5.3 | 9 237 |
| CVE-2025-67896 CRITICAL 9.8 | 8 614 |
| CVE-2026-94057 MEDIUM 5.3 | 5 821 |
| CVE-2026-94056 HIGH 7.5 | 5 683 |
| CVE-2026-94054 HIGH 7.0 | 5 683 |
| CVE-2024-39929 MEDIUM 5.4 | 5 309 |
| CVE-2026-66140 HIGH 7.8 | 4 981 |
| CVE-2023-51766 MEDIUM 5.3 | 4 764 |
| CVE-2022-3559 HIGH 7.5 | 4 259 |
| CVE-2023-42117 CRITICAL 9.8 | 3 765 |
| CVE-2023-42119 LOW 3.1 | 3 765 |
| CVE-2023-42115 CRITICAL 9.8 | 3 689 |
| CVE-2023-42116 CRITICAL 9.8 | 3 689 |
| CVE-2023-42114 MEDIUM 5.3 | 3 689 |
| CVE-2022-37451 HIGH 7.5 | 3 091 |
| CVE-2026-94055 LOW 3.7 | 3 063 |
| CVE-2025-30232 HIGH 7.8 | 3 006 |
| CVE-2026-45185 CRITICAL 9.8 | 2 539 |
| CVE-2022-37452 CRITICAL 9.8 | 2 281 |
| CVE-2021-38371 HIGH 7.5 | 2 281 |
| CVE-2022-3620 CRITICAL 9.8 | 1 978 |
| CVE-2020-28017 CRITICAL 9.8 | 1 895 |
| CVE-2020-28022 CRITICAL 9.8 | 1 895 |
| CVE-2020-28024 CRITICAL 9.8 | 1 895 |
| CVE-2020-28026 CRITICAL 9.8 | 1 895 |
| CVE-2020-28021 HIGH 8.8 | 1 895 |
| CVE-2020-28007 HIGH 7.8 | 1 895 |
| CVE-2020-28008 HIGH 7.8 | 1 895 |
| CVE-2020-28009 HIGH 7.8 | 1 895 |
| CVE-2020-28010 HIGH 7.8 | 1 895 |
| CVE-2020-28011 HIGH 7.8 | 1 895 |
| CVE-2020-28012 HIGH 7.8 | 1 895 |
| CVE-2020-28013 HIGH 7.8 | 1 895 |
| CVE-2020-28015 HIGH 7.8 | 1 895 |
| CVE-2020-28016 HIGH 7.8 | 1 895 |
| CVE-2020-28023 HIGH 7.5 | 1 895 |
| CVE-2020-28025 HIGH 7.5 | 1 895 |
| CVE-2021-27216 MEDIUM 6.3 | 1 895 |
| CVE-2020-28014 MEDIUM 6.1 | 1 895 |
| CVE-2020-8015 HIGH 7.8 | 1 699 |
| CVE-2020-12783 HIGH 7.5 | 1 648 |
| CVE-2020-28019 HIGH 7.5 | 1 544 |
| CVE-2020-28018 CRITICAL 9.8 | 1 328 |
| CVE-2019-15846 CRITICAL 9.8 | 1 095 |
| CVE-2019-13917 CRITICAL 9.8 | 850 |
| CVE-2020-28020 CRITICAL 9.8 | 816 |
| CVE-2018-6789 CRITICAL 9.8 known exploited | 720 |
| CVE-2017-1000369 MEDIUM 4.0 | 562 |
| CVE-2019-10149 CRITICAL 9.8 known exploited | 505 |
| CVE-2025-26794 CRITICAL 9.8 | 460 |
| CVE-2016-9963 MEDIUM 5.9 | 351 |
| CVE-2019-16928 CRITICAL 9.8 known exploited | 313 |
| CVE-2016-1531 HIGH 7.0 | 305 |
| CVE-2017-16943 CRITICAL 9.8 | 211 |
| CVE-2017-16944 HIGH 7.5 | 211 |
| CVE-2014-2957 MEDIUM 6.8 | 173 |
| CVE-2014-2972 MEDIUM 4.6 | 173 |
| CVE-2012-5671 MEDIUM 6.8 | 106 |
| CVE-2011-1764 HIGH 7.5 | 63 |
| CVE-2010-4345 HIGH 7.8 known exploited | 54 |
| CVE-2011-0017 MEDIUM 6.9 | 54 |
| CVE-2011-1407 HIGH 7.5 | 33 |
| CVE-2010-2023 MEDIUM 4.4 | 32 |
| CVE-2010-2024 MEDIUM 4.4 | 32 |
| CVE-2010-4344 CRITICAL 9.8 known exploited | 30 |
Hosts: matches on services open at each host's latest check, over every version.