https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 13:16:59 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0558 certfr-2026-avi-0558 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0558 https://cve.radiocsirt.org/vuln/euvd-2026-362297 EUVD-2026-362297 https://cve.radiocsirt.org/vuln/euvd-2026-362297 https://cve.radiocsirt.org/vuln/fkie_cve-2026-6842 <p>A flaw was found in nano. In environments with permissive umask settings, a local attacker can exploit incorrect directory permissions (0777 instead of 0700) for the `~/.local` directory. This allows the attacker to inject a malicious `.desktop` launcher, which could lead to unintended actions or information disclosure if the launcher is subsequently processed.</p> <p>A flaw was found in nano. In environments with permissive umask settings, a local attacker can exploit incorrect directory permissions (0777 instead of 0700) for the `~/.local` directory. This allows the attacker to inject a malicious `.desktop` launcher, which could lead to unintended actions or information disclosure if the launcher is subsequently processed.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-6842 https://cve.radiocsirt.org/vuln/ghsa-ccfr-97mr-qq8g <p>A flaw was found in nano. In environments with permissive umask settings, a local attacker can exploit incorrect directory permissions (0777 instead of 0700) for the `~/.local` directory. This allows the attacker to inject a malicious `.desktop` launcher, which could lead to unintended actions or information disclosure if the launcher is subsequently processed.</p> <p>A flaw was found in nano. In environments with permissive umask settings, a local attacker can exploit incorrect directory permissions (0777 instead of 0700) for the `~/.local` directory. This allows the attacker to inject a malicious `.desktop` launcher, which could lead to unintended actions or information disclosure if the launcher is subsequently processed.</p> https://cve.radiocsirt.org/vuln/ghsa-ccfr-97mr-qq8g https://cve.radiocsirt.org/vuln/msrc_cve-2026-6842 msrc_CVE-2026-6842 https://cve.radiocsirt.org/vuln/msrc_cve-2026-6842 https://cve.radiocsirt.org/vuln/oesa-2026-2160 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: nano, openEuler:22.03-LTS-SP4: nano, openEuler:24.03-LTS: nano, openEuler:24.03-LTS-SP1: nano, openEuler:24.03-LTS-SP3: nano</p> <p>Nano is a tiny GNU editor Security Fix(es):</p> <p>A flaw was found in nano. In environments with permissive umask settings, a local attacker can exploit incorrect directory permissions (0777 instead of 0700) for the `~/.local` directory. This allows the attacker to inject a malicious `.desktop` launcher, which could lead to unintended actions or information disclosure if the launcher is subsequently processed.(CVE-2026-6842)</p> <p>A flaw was found in nano. A local user could exploit a format string vulnerability in the `statusline()` function. By creating a directory with a name containing `printf` specifiers, the application attempts to display this name, leading to a segmentation fault (SEGV). This results in a Denial of Service (DoS) for the `nano` application.(CVE-2026-6843)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: nano, openEuler:22.03-LTS-SP4: nano, openEuler:24.03-LTS: nano, openEuler:24.03-LTS-SP1: nano, openEuler:24.03-LTS-SP3: nano</p> <p>Nano is a tiny GNU editor Security Fix(es):</p> <p>A flaw was found in nano. In environments with permissive umask settings, a local attacker can exploit incorrect directory permissions (0777 instead of 0700) for the `~/.local` directory. This allows the attacker to inject a malicious `.desktop` launcher, which could lead to unintended actions or information disclosure if the launcher is subsequently processed.(CVE-2026-6842)</p> <p>A flaw was found in nano. A local user could exploit a format string vulnerability in the `statusline()` function. By creating a directory with a name containing `printf` specifiers, the application attempts to display this name, leading to a segmentation fault (SEGV). This results in a Denial of Service (DoS) for the `nano` application.(CVE-2026-6843)</p> https://cve.radiocsirt.org/vuln/oesa-2026-2160 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10851-1 <p>nano-9.0-2.1 on GA media</p> <p>nano-9.0-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10851-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-6842 <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: nano, Ubuntu:Pro:20.04:LTS: nano, Ubuntu:22.04:LTS: nano, Ubuntu:24.04:LTS: nano, Ubuntu:25.10: nano, Ubuntu:26.04:LTS: nano</p> <p>A flaw was found in nano. In environments with permissive umask settings, a local attacker can exploit incorrect directory permissions (0777 instead of 0700) for the `~/.local` directory. This allows the attacker to inject a malicious `.desktop` launcher, which could lead to unintended actions or information disclosure if the launcher is subsequently processed.</p> <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: nano, Ubuntu:Pro:20.04:LTS: nano, Ubuntu:22.04:LTS: nano, Ubuntu:24.04:LTS: nano, Ubuntu:25.10: nano, Ubuntu:26.04:LTS: nano</p> <p>A flaw was found in nano. In environments with permissive umask settings, a local attacker can exploit incorrect directory permissions (0777 instead of 0700) for the `~/.local` directory. This allows the attacker to inject a malicious `.desktop` launcher, which could lead to unintended actions or information disclosure if the launcher is subsequently processed.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-6842