Security alerts
What to fix right now.
Short alerts when a serious flaw hits sites like yours: what happened, who is affected, how to check your site and what to do. The important ones from the past year are here too, in case you missed them. Every alert cites its official sources.
Security alerts
May 2026
Exim mail server flaw allowed remote code execution without login: update Exim
A critical Exim flaw could let anyone who connects to the mail server run code on it. Fixed in May 2026, followed by more Exim fixes.
