anonhaven

CVE-2026-66141

HIGH CVSS 3.1: 7.4 EPSS 0.10%
Updated Jul 24, 2026
Exim
Parameter Value
CVSS 7.4 (HIGH)
Affected Versions before 4.99.5
Type CWE-829 (Inclusion of Functionality from Untrusted Source)
Vendor Exim
Public PoC No

Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe transport is mishandled.

Attack Parameters

Attack Vector
Local
Requires local access
Attack Complexity
High
Difficult to exploit
Privileges Required
None
No privileges needed
User Interaction
None
No user interaction needed

Impact Assessment

Confidentiality
High
Complete data leak
Integrity
High
Complete data modification
Availability
High
Complete denial of service

CVSS Vector v3.1

Weakness Type (CWE)

CWE-829 Inclusion of Functionality from Untrusted Source

References 1

https://openwall.com/lists/oss-security/2026/07/22/9
cve@mitre.org
Share Post Share Share Share

Related Vulnerabilities

CVE-2026-66140

Exim

8.4