CVE-2026-66140: High severity Exim Exim vulnerability
Published Jul 24, 2026
·Updated
Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because arguments related to queue-name are mishandled.
Affected Software
1 affected component
Exim Exim<4.99.5
Event History
Jul 24, 2026
CVE Published
via MITRE·04:32 AM
Data Sourced
via MITRE·04:32 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-66140?
The severity of CVE-2026-66140 is classified as high with a score of 8.4.
2
What does CVE-2026-66140 exploit in Exim?
CVE-2026-66140 exploits directory traversal vulnerabilities in Exim version prior to 4.99.5 to access files outside the spool area.
3
How can I fix CVE-2026-66140?
To fix CVE-2026-66140, update Exim to version 4.99.5 or higher to mitigate the vulnerability.
4
What are the potential impacts of CVE-2026-66140?
CVE-2026-66140 can lead to privilege escalation due to unauthorized access to sensitive files.
5
Which versions of Exim are affected by CVE-2026-66140?
CVE-2026-66140 affects all Exim versions prior to 4.99.5.