Are mail servers (Exim, Postfix) safe right now?
No mail server flaws have been added to CISA's exploited list in the last 90 days (the most recent was Mar 25, 2022). Keep automatic updates on: that can change any day.
Earlier exploited flaws
- Exim Privilege Escalation Vulnerability
- Exim Heap-Based Buffer Overflow Vulnerability
- Exim Out-of-bounds Write Vulnerability
- Exim Mail Transfer Agent (MTA) Improper Input Validation
- Exim Buffer Overflow Vulnerability
By year
| Year | Exploited flaws added | Zero-days |
|---|---|---|
| 2026 (so far) | 0 | 0 |
| 2025 | 0 | 0 |
| 2024 | 0 | 0 |
| 2023 | 0 | 0 |
| 2022 | 4 | 0 |
Questions
Are mail servers (Exim, Postfix) safe right now?
No mail server flaws have been added to CISA's exploited list in the last 90 days (the most recent was Mar 25, 2022). Keep automatic updates on: that can change any day. Confirm with the vendor's own advisories and install updates as soon as they're available.
How many mail servers vulnerabilities have been exploited?
5 flaws are on CISA's list of vulnerabilities known to be exploited in real attacks, 1 of them used by ransomware.
Covers products matching exim, postfix, sendmail. Sources: CISA's Known Exploited Vulnerabilities catalog and the vendors' own advisories. Updated every hour. General information only; confirm details with the vendor.