DeutschShown in its original language — a full translation is planned for a future version.
vim: Mehrere Schwachstellen ermöglichen Codeausführung
view advisory published 2026-06-28
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in vim ausnutzen, um beliebigen Programmcode auszuführen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-59858US | high7.8 | — | ||
Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim interpolates the typeref: or typename: extension… | ||||
| CVE-2026-59856US | high7.8 | — | ||
Vim is an open source, command line text editor. Prior to 9.2.0736, the PHP omni-completion script in runtime/autoload/phpcomplete.vim interpolates a class or trait name, taken fro… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:47982 vom 2026-07-30external
- Red Hat Security Advisory RHSA-2026:48650 vom 2026-08-01external
- Red Hat Security Advisory RHSA-2026:48703 vom 2026-07-30external
- Red Hat Security Advisory RHSA-2026:53371 vom 2026-08-11external
- Red Hat Security Advisory RHSA-2026:54387 vom 2026-08-12external
- Red Hat Security Advisory RHSA-2026:54769 vom 2026-08-18external
- Red Hat Security Advisory RHSA-2026:55431 vom 2026-08-17external
- Red Hat Security Advisory RHSA-2026:68711 vom 2026-09-17external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan