WID-SEC-W-2026-2494

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Exim: Mehrere Schwachstellen

view advisory published 2026-07-22

Ein lokaler Angreifer kann mehrere Schwachstellen in Exim ausnutzen, um beliebige Befehle auszuführen und Berechtigungen zu erweitern.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2026-66141UShigh7.8—
Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe transport is mishandled.
CVE-2026-66140UShigh7.8—
Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because arguments related to queue-name are mishandled.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan