Cve 2026 45185 Dead Letter

Name: Cve 2026 45185 Dead Letter
Price: 5 USD
Availability: InStock
Author: Agensi

by Liam Romanis

Detect and remediate CVE-2026-45185 "Dead.Letter" RCE vulnerabilities in Exim mail servers.

30-day refund guarantee

Secure checkout via Stripe

0 installsSecurity scanned

Works with the AI tools you already use

CCCGGVW+15 more

See it in action

You say

Check if my Exim mail server is vulnerable to the Dead.Letter exploit and show me how to fix it if it is.

Your agent does

[!] VULNERABLE: Exim v4.98 detected with GnuTLS. Check 1: Exim present [OK] Check 2: Version 4.98 [VULNERABLE] Check 3: Linked to GnuTLS [VULNERABLE] Check 4: CHUNKING enabled [VULNERABLE]

Remediation: Upgrade to Exim 4.99.3 or set 'chunking_advertise_hosts =' to disable BDAT.

What you get

Audit Exim server for Dead.Letter RCE vulnerabilities.Verify if Exim is linked against vulnerable GnuTLS libraries.Implement a CI/CD security gate to prevent deploying vulnerable mail configs.Harden Exim systemd services with memory protection mitigations.

About this skill

What it does

This skill provides a specialized security audit for CVE-2026-45185 (Dead.Letter), a high-severity use-after-free vulnerability affecting Exim mail servers. It performs a comprehensive, read-only analysis of your system to determine if the local Exim installation is susceptible to remote code execution (RCE).

How it works

The skill executes a multi-point inspection of the host environment, checking:

Binary Versions: Targets Exim 4.97 through 4.99.2.
Library Linkage: Specifically detects GnuTLS builds, as OpenSSL-linked versions are unaffected.
Configuration State: Audits BDAT/CHUNKING settings to see if the vulnerable path is exposed.
System Mitigations: Evaluates ASLR levels and systemd hardening like MemoryDenyWriteExecute.

Why use this skill

Manually checking for "Dead.Letter" is error-prone because version numbers alone don't tell the whole story—vulnerability depends on the specific TLS library and configuration. This skill automates the detection logic, providing a definitive VULNERABLE, NOT VULNERABLE, or INCONCLUSIVE verdict with actionable remediation steps.

Supported Environments

Compatible with standard Linux mail server deployments (Ubuntu, Debian, RHEL) and containerized Exim instances. It requires no root privileges and makes no modifications to the system.