CVE-2026-66140

A flaw was found in Exim. This vulnerability allows an attacker to perform directory traversal by mishandling arguments related to queue-name. This could enable unauthorized access to files outside of the designated spool area, potentially leading to a gain of privileges. Mitigation Mitigation fo...

Linux Distros Unpatched Vulnerability : CVE-2026-66140

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because arguments related to queue-na...

Linux Distros Unpatched Vulnerability : CVE-2026-66141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled. CVE-2026-66141 Note that Nessus relies on the...

DEBIAN-CVE-2026-66141

Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...

UBUNTU-CVE-2026-66140

Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because arguments related to queue-name are mishandled...

EUVD-2026-48479

Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...

CVE-2026-66141

Affected software : Exim before 4.99.5. Vulnerability : .forward privilege escalation due to mishandling of force_command for a pipe transport. Root cause : improper handling of force_command in a pipe transport within Exim, enabling a local attacker to escalate privileges. Impact : high severity...

CVE-2026-66140

Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because arguments related to queue-name are mishandled...

EUVD-2026-48478

Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because arguments related to queue-name are mishandled...

CVE-2026-66140

CVE-2026-66140 affects Exim before 4.99.5. The root cause is mishandling of queue-name arguments, enabling directory traversal outside the spool area and resulting in privilege escalation. Exploitation requires local access (no user interaction) and yields high impact to confidentiality, integrit...

PT-2026-64235

Exim before 4.99.5 allows .forward privilege escalation because force command for a pipe transport is mishandled...

USN-6455-2: Exim regression

USN-6455-1 fixed vulnerabilities in Exim. The fix for CVE-2023-42117 introduced a regression on Ubuntu 22.04 LTS that resulted in certain connections logging a Taint mismatch error. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered tha...

Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : Exim vulnerability (USN-8353-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8353-1 advisory. Warisjeet Singh discovered that Exim with SUPPORTPROXY enabled did not properly handle memory before SMTP authentication. A remote...

USN-8353-1: Exim vulnerability

Warisjeet Singh discovered that Exim with SUPPORTPROXY enabled did not properly handle memory before SMTP authentication. A remote attacker could possibly use this issue to obtain sensitive information...

USN-8353-1 exim4 vulnerability

Warisjeet Singh discovered that Exim with SUPPORTPROXY enabled did not properly handle memory before SMTP authentication. A remote attacker could possibly use this issue to obtain sensitive information...

CVE-2026-48840

Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of uninitialized stack memory values to a client...

CVE-2026-48840

Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of uninitialized stack memory values to a client...

CVE-2026-48840

Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of uninitialized stack memory values to a client...

EUVD-2026-33446

Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of uninitialized stack memory values to a client...

PT-2026-44997

Name of the Vulnerable Software and Affected Versions Exim versions 4.88 through 4.99.3 Description In certain proxy configurations where SUPPORT PROXY is enabled, the PROXY protocol parser mishandles short payloads before SMTP authentication. This leads to a pre-authentication information...