IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-04-06 16:16

MODIFIED

2026-04-06 16:16

CVSS_SCORE V3

8.2

EPSS (Prob. Exploit)

0.27%

Top 81.6%

DATA SOURCES:

NVD 🔗 2026-04-06 RED HAT 🔗 2026-04-12 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-10-25 MSRC 🔗 2026-11-02

> DESCRIPTION

Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution when a user opens a crafted file. The `complete`, `guitabtooltip` and `printheader` options are missing the `P_MLE` flag, allowing a modeline to be executed. Additionally, the `mapset()` function lacks a `check_secure()` call, allowing it to be abused from sandboxed expressions. Commit 9.2.0276 fixes the issue.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> CVSS V3 METRICS

CVSS_VECTOR

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

EXPLOITABILITY

1.8

IMPACT

5.8

> MÉTRIQUES CVSS DÉTAILLÉES

                CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
            

Métrique	Valeur	Interprétation
AV (Vecteur d'Attaque) Attack Vector	Local (L)	Exploit nécessite un accès local au système
AC (Complexité d'Attaque) Attack Complexity	Low (L)	Peu de conditions requises pour exploiter
PR (Privilèges Requis) Privileges Required	None (N)	Aucune authentification requise
UI (Interaction Utilisateur) User Interaction	Required (R)	Nécessite une action utilisateur (clic lien, ouverture fichier, etc.)
S (Périmètre) Scope	Changed (C)	Impact s'étend au-delà du composant compromis
C (Impact Confidentialité) Confidentiality Impact	High (H)	Divulgation totale d'informations
I (Impact Intégrité) Integrity Impact	High (H)	Modification totale des données possible
A (Impact Disponibilité) Availability Impact	None (N)	Aucune interruption de service

> RÉSUMÉ DES IMPACTS

Confidentialité

High

Divulgation totale d'informations

Intégrité

High

Modification totale des données possible

Disponibilité

None

Aucune interruption de service

> WEAKNESSES

CWE-78

> CWE DETAILED DESCRIPTIONS

CWE-78: Improper Neutralization of Special Elements used in an OS Command - The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command before it is sent to a downstream component.

> RED HAT SECURITY ADVISORIES

RHSA-2026:11389 IMPORTANT

Red Hat Security Advisory: vim security update

An update for vim is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVS...

RHSA-2026:11509 IMPORTANT

Red Hat Security Advisory: vim security update

An update for vim is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS...

RHSA-2026:11510 IMPORTANT

Red Hat Security Advisory: vim security update

An update for vim is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS...

RHSA-2026:19073 IMPORTANT

Red Hat Security Advisory: vim security update

RHSA-2026:19224 IMPORTANT

Red Hat Security Advisory: vim security update

RHSA-2026:21275 CRITICAL

Red Hat Security Advisory: Red Hat Update Infrastructure 5.1 security update

The latest release of Red Hat Update Infrastructure. For more details, see the product documentation.

RHSA-2026:22634 IMPORTANT

Red Hat Security Advisory: Insights proxy Container Image

Initial GA Release of Red Hat Insights proxy

RHSA-2026:28050 IMPORTANT

Red Hat Security Advisory: vim security update

An update for vim is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerab...

RHSA-2026:28049 IMPORTANT

Red Hat Security Advisory: vim security update

An update for vim is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Commo...

RHSA-2026:28133 IMPORTANT

Red Hat Security Advisory: vim security update

An update for vim is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Commo...

RHSA-2026:30078 IMPORTANT

Red Hat Security Advisory: Red Hat AI Inference Server Model Optimization Tools 3.3.5 (CUDA)

Red Hat AI Inference Server Model Optimization Tools 3.3.5 (CUDA) is now available.

RHSA-2026:30089 CRITICAL

Red Hat Security Advisory: Red Hat AI Inference Server 3.3.5 (CUDA)

Red Hat AI Inference Server 3.3.5 (CUDA) is now available.

RHSA-2026:30088 CRITICAL

Red Hat Security Advisory: Red Hat AI Inference Server 3.3.5 (ROCm)

Red Hat AI Inference Server 3.3.5 (ROCm) is now available.

RHSA-2026:30087 CRITICAL

Red Hat Security Advisory: Red Hat AI Inference Server 3.3.5 (Spyre)

Red Hat AI Inference Server 3.3.5 (Spyre) is now available.

RHSA-2026:30900 IMPORTANT

Red Hat Security Advisory: vim security update

An update for vim is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnera...

RHSA-2026:33453 IMPORTANT

Red Hat Security Advisory: vim security update

An update for vim is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product...

RHSA-2026:34476 IMPORTANT

Red Hat Security Advisory: vim security update

An update for vim is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has...

RHSA-2026:34477 IMPORTANT

Red Hat Security Advisory: vim security update

An update for vim is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product...

RHSA-2026:36006 IMPORTANT

Red Hat Security Advisory: Red Hat AI Inference Server 3.2.2 (ROCm)

Red Hat AI Inference Server 3.2.2 (ROCm) is now available.

RHSA-2026:36004 IMPORTANT

Red Hat Security Advisory: Red Hat AI Inference Server Model Optimization Tools 3.2.2 (cuda)

Red Hat AI Inference Server Model Optimization Tools 3.2.2 (cuda) is now available.

RHSA-2026:36005 IMPORTANT

Red Hat Security Advisory: Red Hat AI Inference Server 3.2.2 (CUDA)

Red Hat AI Inference Server 3.2.2 (CUDA) is now available.

RHSA-2026:58981 CRITICAL

Red Hat Security Advisory: Red Hat Update Infrastructure 5.3 Technology Preview security update

A new set of Red Hat Update Infrastructure container images is now available as a Technology Preview in the Red Hat container registry.

RHSA-2026:57483 IMPORTANT

Red Hat Security Advisory: OpenShift Container Platform 4.18.54 bug fix and security update

Red Hat OpenShift Container Platform release 4.18.54 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red...

RHSA-2026:57402 IMPORTANT

Red Hat Security Advisory: OpenShift Container Platform 4.19.44 bug fix and security update

Red Hat OpenShift Container Platform release 4.19.44 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red H...

RHSA-2026:56853 IMPORTANT

Red Hat Security Advisory: OpenShift Container Platform 4.16.69 bug fix and security update

Red Hat OpenShift Container Platform release 4.16.69 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red...

RHSA-2026:56786 IMPORTANT

Red Hat Security Advisory: OpenShift Container Platform 4.14.72 bug fix and security update

Red Hat OpenShift Container Platform release 4.14.72 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red...

RHSA-2026:56911 IMPORTANT

Red Hat Security Advisory: OpenShift Container Platform 4.15.68 bug fix and security update

Red Hat OpenShift Container Platform release 4.15.68 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red H...

RHSA-2026:59831 IMPORTANT

Red Hat Security Advisory: OpenShift Container Platform 4.12.97 bug fix and security update

Red Hat OpenShift Container Platform release 4.12.97 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red H...

RHSA-2026:60019 IMPORTANT

Red Hat Security Advisory: OpenShift Container Platform 4.17.57 bug fix and security update

Red Hat OpenShift Container Platform release 4.17.57 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red...

RHSA-2026:68711 IMPORTANT

Red Hat Security Advisory: vim security update

An update for vim is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnera...

RHSA-2026:65839 IMPORTANT

Red Hat Security Advisory: OpenShift Container Platform 4.13.71 bug fix and security update

Red Hat OpenShift Container Platform release 4.13.71 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red H...

RHSA-2026:69128 IMPORTANT

Red Hat Security Advisory: vim security update

An update for vim is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION. Red Hat Product Security has rated this update as having a security impact of Important. A C...

RHSA-2026:74674 IMPORTANT

Red Hat Security Advisory: Red Hat AI Base Images 3.4.3 (Neuron)

Red Hat AI Base Images 3.4.3 (Neuron) is now available.

> RED HAT SEVERITY ASSESSMENT

THREAT SEVERITY

Important

> HISTORIQUE DES MODIFICATIONS

Première apparition

06/04/2026 16:16

Source: NVD

📊 ENRICHISSEMENT 01/11/2026 06:59

CWE

Champ modifié: Description CWE

Ancienne valeur:

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') - The product constructs all or part of an OS command using externally-influenced input from an upstr...

Nouvelle valeur:

📊 ENRICHISSEMENT 01/05/2026 06:01

CWE

Champ modifié: Description CWE

Ancienne valeur:

N/A

Nouvelle valeur:

📊 ENRICHISSEMENT 12/04/2026 05:01

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 07/04/2026 23:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 07/04/2026 22:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 07/04/2026 21:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 07/04/2026 20:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 07/04/2026 19:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 07/04/2026 18:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 07/04/2026 17:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 07/04/2026 16:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 07/04/2026 15:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 07/04/2026 14:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 07/04/2026 13:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 07/04/2026 12:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 07/04/2026 11:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 07/04/2026 10:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 07/04/2026 09:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 07/04/2026 08:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 07/04/2026 07:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 07/04/2026 06:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 07/04/2026 05:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 07/04/2026 04:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 07/04/2026 03:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 07/04/2026 02:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 07/04/2026 01:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 07/04/2026 00:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

N/A

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 07/04/2026 00:30

REDHAT

Champ modifié: Red Hat

Ancienne valeur:

Non

Nouvelle valeur:

Oui

Total des modifications: 28 Dernière mise à jour: 1 week ago

> REFERENCES

https://github.com/vim/vim/commit/75661a66a1db1e1f3f1245c615

https://github.com/vim/vim/releases/tag/v9.2.0276

https://github.com/vim/vim/security/advisories/GHSA-8h6p-m6gr-mpw9

http://www.openwall.com/lists/oss-security/2026/04/01/1

« BACK_TO_HOME

> CVE-2026-34982 [HIGH]

> DESCRIPTION

> AFFECTED_PRODUCTS

> CVSS V3 METRICS

> MÉTRIQUES CVSS DÉTAILLÉES

> RÉSUMÉ DES IMPACTS

> WEAKNESSES

> CWE DETAILED DESCRIPTIONS

> RED HAT SECURITY ADVISORIES

> RED HAT SEVERITY ASSESSMENT

> HISTORIQUE DES MODIFICATIONS

> REFERENCES