Cve 2026 45185 Dead Letter

    2

    Detect and remediate CVE-2026-45185 "Dead.Letter" RCE vulnerabilities in Exim mail servers.

    $5

    Secure checkout via Stripe

    Money-back guarantee

    Converts to your local currency at checkout

    Security scanned

    Works with the AI Agents you already use

    Claude CodeClaude CodeCursorCursorCodex CLICodex CLIMuseMuseDotsDots+22 more

    cve-2026-45185-dead-letter

    Example session with this skill installed

    Check if my Exim mail server is vulnerable to the Dead.Letter exploit and show me how to fix it if it is.

    • Read your context and instructions
    • Compiled the cve-2026-45185-dead-letter

    [!] VULNERABLE: Exim v4.98 detected with GnuTLS.
    Check 1: Exim present [OK]
    Check 2: Version 4.98 [VULNERABLE]
    Check 3: Linked to GnuTLS [VULNERABLE]
    Check 4: CHUNKING enabled [VULNERABLE]

    Remediation: Upgrade to Exim 4.99.3 or set 'chunking_advertise_hosts =' to disable BDAT.

    Connects securely to your tools. The creator never sees your data.

    About this skill

    What it does

    This skill provides a specialized security audit for CVE-2026-45185 (Dead.Letter), a high-severity use-after-free vulnerability affecting Exim mail servers. It performs a comprehensive, read-only analysis of your system to determine if the local Exim installation is susceptible to remote code execution (RCE).

    How it works

    The skill executes a multi-point inspection of the host environment, checking:

    • Binary Versions: Targets Exim 4.97 through 4.99.2.
    • Library Linkage: Specifically detects GnuTLS builds, as OpenSSL-linked versions are unaffected.
    • Configuration State: Audits BDAT/CHUNKING settings to see if the vulnerable path is exposed.
    • System Mitigations: Evaluates ASLR levels and systemd hardening like MemoryDenyWriteExecute.

    Why use this skill

    Manually checking for "Dead.Letter" is error-prone because version numbers alone don't tell the whole story—vulnerability depends on the specific TLS library and configuration. This skill automates the detection logic, providing a definitive VULNERABLE, NOT VULNERABLE, or INCONCLUSIVE verdict with actionable remediation steps.

    Supported Environments

    Compatible with standard Linux mail server deployments (Ubuntu, Debian, RHEL) and containerized Exim instances. It requires no root privileges and makes no modifications to the system.

    How to use

    Skills on Agensi run inside your AI agent. Copy the prompt, paste it into your agent, and it connects to Agensi and installs this skill for you. If a payment is needed, your agent shows it to you first.

    Reviews

    No reviews yet

    Be one of the first to try it. Every listed skill passes our trust checks below.

    Security scanned

    Passed our 8-point scan before listing

    Fresh listing

    Recently published to Agensi

    Money-back guarantee

    Doesn't do what its page promises? You get your money back.

    Trust & safety

    Security scanned

    Verified clean 4 months ago

    • Passed all security checks, Safe to install

    Listed4 months ago

    What's inside

    Frequently Asked Questions