A vulnerability was found in Exim up to 4.99.1. It has been classified as critical. Affected by this vulnerability is an unknown functionality of the component JSON Handler. Performing a manipulation results in out-of-bounds read.
This vulnerability was named CVE-2026-40685. The attack may be initiated remotely. There is no available exploit.
Upgrading the affected component is recommended.
