A security vulnerability in Exim mail server (CVE-2026-45185, also known as “Dead.Letter”) has been reported. This vulnerability does not affect Ecenica hosting servers.
What is CVE-2026-45185?
CVE-2026-45185 is a security vulnerability in Exim mail server that affects how it processes email messages when using GnuTLS for encrypted connections.
Technical details:
- Affects Exim version 4.97 and later
- Only occurs when Exim is compiled with GnuTLS
- Related to binary data transmission (BDAT) message parsing
Does This Affect Ecenica Hosting?
No. Ecenica hosting servers are not affected by this vulnerability.
Why Ecenica is safe:
Ecenica uses a version of Exim compiled with OpenSSL, not GnuTLS. This vulnerability only affects servers using GnuTLS for TLS connections.
Our Exim configuration does not include the USE_GNUTLS flag, which means this specific vulnerability cannot be exploited on Ecenica servers.
Do I Need to Do Anything?
No action required. Your Ecenica hosting account is not at risk from this vulnerability.
Your email services continue operating securely without any changes needed.
Will Ecenica Update Exim?
Yes. We apply security updates immediately upon release as part of our standard security maintenance. When cPanel releases an updated version of Exim that includes security patches we will update it.
You don’t need to do anything — updates are applied automatically to all Ecenica hosting servers ensuring your accounts and hosting services are protected.
More Information
For technical details about this vulnerability, see the official CVE record:
Need Help?
If you have questions about security on your Ecenica hosting account, contact Ecenica support.
