CVE-2026-66141: Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe transport is mishandled.

Description

Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe transport is mishandled.

Vendor	Product	Versions
Exim	Exim	4.82

Tier C

VulDB31d ago

→ No new info (linked only)

CVSS 3.17.4 HIGH

VectorCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA KEV❌ No

Actively exploited❌ No

Patch available

4.99.5

CWECWE-829

PublishedJul 24, 2026

Last enriched31d ago

Trending Score1

Source articles1

Independent1

Info Completeness9/14

Missing: epss, kev, exploit, iocs, mitre_attack