CVE-2026-66141

Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...

Avoid the .forward File in the Home Directory

An email address can be configured in the .forward file. When a user receives an email, the email is automatically forwarded to the email address. If there are no email forwarding scenarios, you are advised to delete the .forward file. If the .forward file exists, emails containing sensitive...