← Back to CVE search

CVE-2026-66140

Exim

Description

Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because arguments related to queue-name are mishandled.

CVSS 8.4EPSS 0.272%Risk 0.86
View source
Published
2026-07-24 05:16:49
Affected versions
<4.99.5
Type
Critical software
Last modified
2026-07-30 14:15:31
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H