https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T15:40:40.648638+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-14501 bdu:2026-14501 2026-10-04T15:40:40.657717+00:00 bdu:2026-14501 https://cve.radiocsirt.org/vuln/bell-cve-2026-57453 BELL-CVE-2026-57453 2026-10-04T15:40:40.657755+00:00

Affected: Alpaquita:23: vim, Alpaquita:25: vim, Alpaquita:stream: vim

 https://cve.radiocsirt.org/vuln/euvd-2026-330657 EUVD-2026-330657 2026-10-04T15:40:40.657786+00:00 EUVD-2026-330657 https://cve.radiocsirt.org/vuln/fkie_cve-2026-57453 fkie_cve-2026-57453 2026-10-04T15:40:40.657799+00:00

Vim is an open source, command line text editor. From 9.1.1784 until 9.2.0678, when the bundled zip plugin autoload/zip.vim falls back to PowerShell to browse, read, extract, update or delete entries in a zip archive, it builds the PowerShell command by inserting archive entry names that are quoted only for the shell, not for PowerShell. A crafted entry name can break out of the intended string context and cause PowerShell to execute arbitrary commands with the privileges of the user running Vim, triggered by opening, viewing or extracting the archive. This vulnerability is fixed in 9.2.0678.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-57453 msrc_CVE-2026-57453 — Vim: PowerShell Command Injection via Unescaped Filename in zip.vim Extraction 2026-10-04T15:40:40.657825+00:00 msrc_CVE-2026-57453 https://cve.radiocsirt.org/vuln/rhsa-2026:57614 RHSA-2026:57614 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-04T15:40:40.657843+00:00

vim: arbitrary command execution via modeline sandbox bypass vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass vim: Vim: Arbitrary code execution via command injection in NetBeans interface vim: Command injection allows arbitrary code execution via malicious tag files vim: Vimscript injection via unescaped filename in netrw s:NetrwMarkFile() filter() expression allows arbitrary code execution vim: Vim: Arbitrary command execution via :find command-line completion vim: Vim: Heap buffer overflow allows arbitrary code execution or denial of service vim: command injection when decompressing .tgz archives vim: Vim: Arbitrary Code Execution via crafted directory names vim: Vim: Arbitrary code execution via crafted step-definition patterns vim: Vim: Arbitrary code execution via Python omni-completion vim: Vim: Denial of Service via out-of-bounds write in terminal handling vim: Vim: Arbitrary code execution through Python omni-completion. vim: Vim: Denial of service via crafted undo file vim: Vim: Arbitrary code execution via crafted zip archive entry names vim: Vim: Out-of-bounds Read with Text Properties vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-57453 UBUNTU-CVE-2026-57453 2026-10-04T15:40:40.657886+00:00

Affected: Ubuntu:26.04:LTS: vim

Vim is an open source, command line text editor. From 9.1.1784 until 9.2.0678, when the bundled zip plugin autoload/zip.vim falls back to PowerShell to browse, read, extract, update or delete entries in a zip archive, it builds the PowerShell command by inserting archive entry names that are quoted only for the shell, not for PowerShell. A crafted entry name can break out of the intended string context and cause PowerShell to execute arbitrary commands with the privileges of the user running Vim, triggered by opening, viewing or extracting the archive. This vulnerability is fixed in 9.2.0678.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2026 WID-SEC-W-2026-2026 — vim: Mehrere Schwachstellen 2026-10-04T15:40:40.657936+00:00

Ein Angreifer kann mehrere Schwachstellen in vim ausnutzen, um beliebigen Programmcode auszuführen, und um einen Denial of Service Angriff durchzuführen.