[CVE-2026-66140] Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequ…

Descripción técnica

Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because arguments related to queue-name are mishandled.

Puntuación CVSS

Score: 8.4/10 — Severidad: HIGH — Estado NIST: Awaiting Analysis

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Debilidades (CWE)

CWE-24

Fuente oficial

Publicado en NIST NVD.