Lucene search
+L

2210 matches found

RedhatCVE
RedhatCVE
added 4 days ago5 views

CVE-2026-66140

A flaw was found in Exim. This vulnerability allows an attacker to perform directory traversal by mishandling arguments related to queue-name. This could enable unauthorized access to files outside of the designated spool area, potentially leading to a gain of privileges. Mitigation Mitigation fo...

8.4CVSS5.7AI score0.00272EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/07/25 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-66140

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because arguments related to queue-na...

8.4CVSS5.9AI score0.00272EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/07/25 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-66141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled. CVE-2026-66141 Note that Nessus relies on the...

7.4CVSS5.9AI score0.00102EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/24 5:16 a.m.3 views

DEBIAN-CVE-2026-66140

Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because arguments related to queue-name are mishandled...

8.4CVSS5.8AI score0.00272EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/24 5:16 a.m.3 views

DEBIAN-CVE-2026-66141

Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...

7.4CVSS5.8AI score0.00102EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/24 5:16 a.m.7 views

CVE-2026-66141

Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...

7.4CVSS0.00102EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/24 5:16 a.m.7 views

CVE-2026-66140

Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because arguments related to queue-name are mishandled...

8.4CVSS0.00272EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/24 5:16 a.m.5 views

UBUNTU-CVE-2026-66141

Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...

7.4CVSS5.8AI score0.00102EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/24 5:16 a.m.6 views

UBUNTU-CVE-2026-66140

Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because arguments related to queue-name are mishandled...

8.4CVSS5.9AI score0.00272EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/07/24 4:37 a.m.6 views

EUVD-2026-48479

Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...

7.4CVSS5.2AI score0.00102EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/24 4:37 a.m.11 views

CVE-2026-66141

Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...

7.4CVSS5.3AI score0.00102EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2026/07/24 4:37 a.m.11 views

CVE-2026-66141

Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...

7.4CVSS5.8AI score0.00102EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/07/24 4:37 a.m.38 views

CVE-2026-66141

Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...

7.4CVSS0.00102EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/24 4:37 a.m.42 views

CVE-2026-66141

Affected software : Exim before 4.99.5. Vulnerability : .forward privilege escalation due to mishandling of force_command for a pipe transport. Root cause : improper handling of force_command in a pipe transport within Exim, enabling a local attacker to escalate privileges. Impact : high severity...

7.4CVSS5.3AI score0.00102EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/24 4:32 a.m.6 views

EUVD-2026-48478

Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because arguments related to queue-name are mishandled...

8.4CVSS5.3AI score0.00272EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/24 4:32 a.m.10 views

CVE-2026-66140

Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because arguments related to queue-name are mishandled...

8.4CVSS5.4AI score0.00272EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/07/24 4:32 a.m.53 views

CVE-2026-66140

CVE-2026-66140 affects Exim before 4.99.5. The root cause is mishandling of queue-name arguments, enabling directory traversal outside the spool area and resulting in privilege escalation. Exploitation requires local access (no user interaction) and yields high impact to confidentiality, integrit...

8.4CVSS5.4AI score0.00272EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/24 4:32 a.m.42 views

CVE-2026-66140

Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because arguments related to queue-name are mishandled...

8.4CVSS0.00272EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/07/24 4:32 a.m.11 views

CVE-2026-66140

Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because arguments related to queue-name are mishandled...

8.4CVSS5.9AI score0.00272EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/24 12:0 a.m.15 views

PT-2026-64235

Exim before 4.99.5 allows .forward privilege escalation because force command for a pipe transport is mishandled...

7.4CVSS5.3AI score0.00102EPSS
SaveExploits0References1
Rows per page
Query Builder