Security: CVE-2026-45185 (Dead.Letter)
The vulnerability, tracked as CVE-2026-45185, aka Dead.Letter, has been described as a use-after-free vulnerability in Exim's binary data transmission (BDAT) message body parsing when a TLS connection is handled by GnuTLS.
डिफ़ॉल्ट अपडेट कमांड
sudo /scripts/upcp --forceSharedLicense लाइसेंस के तहत इसका अर्थ
Your SharedLicense license itself is not affected — this is a vulnerability in cPanel software, not in licensing. Licenses continue to work during and after the update; there is no need to re-issue or re-activate anything. If you resell cPanel under your own brand, patch client servers too — unpatched installs put your reputation at risk, not your license.
Situation
The vulnerability, tracked as CVE-2026-45185, aka Dead.Letter, has been described as a use-after-free vulnerability in Exim’s binary data transmission (BDAT) message body parsing when a TLS connection is handled by GnuTLS.
This issue affects Exim: 4.97+
Impact
None on your cPanel server, as we do not explicitly set USE_GNUTLS when building our version of Exim. Our version has a dependency on OpenSSL and not GnuTLS.
Call to Action
None at this time, as cPanel is not affected by this GnuTLS vulnerability.
अक्सर पूछे जाने वाले प्रश्न
What is CVE-2026-45185?
Is CVE-2026-45185 being exploited in the wild?
How do I fix CVE-2026-45185?
अपने सिस्टम में भेद्यताओं की जाँच करें
अपना उत्पाद और ऑपरेटिंग सिस्टम चुनें ताकि आपके लिए लागू सटीक फिक्स कमांड देख सकें।
अपना सिस्टम जाँचें