Logo
›
›vulnerability›CVE-2026-39881
Name
CVE-2026-39881
Source
NVD ( link)Debian ( link)
Description
Vim is an open source, command line text editor. Prior to 9.2.0316, a command injection vulnerability in Vim's netbeans interface allows a malicious netbeans server to execute arbitrary Ex commands when Vim connects to it, via unsanitized strings in the defineAnnoType and specialKeys protocol messages. This vulnerability is fixed in 9.2.0316.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
vim
Exploitable

Vulnerability Ratings#


5
CVSSv31
7.8
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
9.2.0943
Not Affected
buildroot
master
9.2.0943
Not Affected
openwrt
master
9.2.1014-r1
Not Affected
openwrt
openwrt-25.12
9.2.1014-r1
Not Affected
yocto
kirkstone
9.1.1683
Exploitable
yocto
master
9.2.0993
Not Affected
yocto
master
9.2.0993
Not Affected