Logo
vulnerabilityCVE-2026-39881
Name
CVE-2026-39881
Source
NVD ( link)Debian ( link)
Description
Vim is an open source, command line text editor. Prior to 9.2.0316, a command injection vulnerability in Vim's netbeans interface allows a malicious netbeans server to execute arbitrary Ex commands when Vim connects to it, via unsanitized strings in the defineAnnoType and specialKeys protocol messages. This vulnerability is fixed in 9.2.0316.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
vim
Exploitable

Vulnerability Ratings#


5
CVSSv31
7.8
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
9.1.2148
Exploitable
buildroot
master
9.1.2148
Exploitable
openwrt
openwrt-25.12
9.2.0-r1
Exploitable
yocto
kirkstone
9.1.1683
Exploitable
yocto
master
9.2.0569
Not Affected
yocto
scarthgap
9.1.1683
Exploitable