EIP-2026-100962

PRE-CVE

McAfee Email Gateway (formerly IronMail) - Local Privilege Escalation

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-100962. PoCs published by Nahuel Grisolia.

AI-analyzed exploit summary This advisory describes a local privilege escalation vulnerability in McAfee Email Gateway (formerly IronMail) version 6.7.1, where improper handling of environment variables allows CLI users to execute arbitrary commands with admin rights. The vulnerability is patched in version 6.7.2 Hotfix 2.

Description

McAfee Email Gateway (formerly IronMail) - Local Privilege Escalation

Exploits (1)

exploitdb WRITEUP
by Nahuel Grisolia · textlocalfreebsd
https://www.exploit-db.com/exploits/12090

This advisory describes a local privilege escalation vulnerability in McAfee Email Gateway (formerly IronMail) version 6.7.1, where improper handling of environment variables allows CLI users to execute arbitrary commands with admin rights. The vulnerability is patched in version 6.7.2 Hotfix 2.

Classification
Writeup 90%
Attack Type
Lpe
Complexity
Trivial
Reliability
Reliable
Target: McAfee Email Gateway (formerly IronMail) ver.6.7.1
Auth required
Prerequisites: Local access to the system · CLI user credentials
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026