CVE-2020-28007

score

<0.1

cvss

7.8

epss

0.5%

published

2021-05-06

kev added

—

first seen

2026-10-21

Exim 4 before 4.94.2 contains a privilege escalation caused by operating as root in the log directory, letting attackers overwrite critical root-owned files via symlink or hard link attack, exploit requires attacker to create malicious links.