Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-39881

Опубликовано: 08 апр. 2026
Источник: nvd
CVSS3: 5
CVSS3: 7.8
EPSS Низкий

Описание

Vim is an open source, command line text editor. Prior to 9.2.0316, a command injection vulnerability in Vim's netbeans interface allows a malicious netbeans server to execute arbitrary Ex commands when Vim connects to it, via unsanitized strings in the defineAnnoType and specialKeys protocol messages. This vulnerability is fixed in 9.2.0316.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*
Версия до 9.2.0316 (исключая)

EPSS

Процентиль: 46%
0.0062
Низкий

5 Medium

CVSS3

7.8 High

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 5
ubuntu
4 месяца назад

Vim is an open source, command line text editor. Prior to 9.2.0316, a command injection vulnerability in Vim's netbeans interface allows a malicious netbeans server to execute arbitrary Ex commands when Vim connects to it, via unsanitized strings in the defineAnnoType and specialKeys protocol messages. This vulnerability is fixed in 9.2.0316.

CVSS3: 5
redhat
4 месяца назад

Vim is an open source, command line text editor. Prior to 9.2.0316, a command injection vulnerability in Vim's netbeans interface allows a malicious netbeans server to execute arbitrary Ex commands when Vim connects to it, via unsanitized strings in the defineAnnoType and specialKeys protocol messages. This vulnerability is fixed in 9.2.0316.

CVSS3: 5
msrc
4 месяца назад

Vim Ex command injection in Vims NetBeans integration

CVSS3: 5
debian
4 месяца назад

Vim is an open source, command line text editor. Prior to 9.2.0316, a ...

suse-cvrf
2 месяца назад

Security update for vim

EPSS

Процентиль: 46%
0.0062
Низкий

5 Medium

CVSS3

7.8 High

CVSS3

Дефекты

CWE-94