CVE-2026-39881

Published: Apr 08, 2026 Last Modified: Apr 08, 2026
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 5,0
Source: [email protected]
Attack Vector: local
Attack Complexity: high
Privileges Required: low
User Interaction: required
Scope: unchanged
Confidentiality: low
Integrity: high
Availability: none

Description

AI Translation Available

Vim is an open source, command line text editor. Prior to 9.2.0316, a command injection vulnerability in Vim's netbeans interface allows a malicious netbeans server to execute arbitrary Ex commands when Vim connects to it, via unsanitized strings in the defineAnnoType and specialKeys protocol messages. This vulnerability is fixed in 9.2.0316.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0017
Percentile
0,4th
Updated

EPSS Score Trend (Last 8 Days)

94

Improper Control of Generation of Code ('Code Injection')

Draft
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Access Control Integrity Confidentiality Availability Non-Repudiation
Potential Impacts:
Bypass Protection Mechanism Gain Privileges Or Assume Identity Execute Unauthorized Code Or Commands Hide Activities
Applicable Platforms
Languages: Interpreted
Technologies: AI/ML
Likelihood of Exploit: Medium
View CWE Details
https://github.com/vim/vim/commit/7ab76a86048ed492374ac6b19
https://github.com/vim/vim/commit/7ab76a86048ed492374ac6b19
https://github.com/vim/vim/releases/tag/v9.2.0316
https://github.com/vim/vim/releases/tag/v9.2.0316
https://github.com/vim/vim/security/advisories/GHSA-mr87-rh…
https://github.com/vim/vim/security/advisories/GHSA-mr87-rhgv-7pw6