CVE-2019-13917

score

<0.1

cvss

9.8

epss

8.6%

published

2019-07-25

kev added

—

first seen

2026-10-21

Exim 4.85 through 4.92 contains a remote code execution caused by unsafe use of the ${sort } expansion in configurations with attacker-controlled items, letting remote attackers execute code as root, exploit requires attacker to control specific configuration parameters.