The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:66348 advisory.

    Vim (Vi IMproved) is an updated and improved version of the vi editor.

    Security Fix(es):

    * vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal     emulator (CVE-2026-28420)

    * vim: Vim: Denial of Service via out-of-bounds write in terminal handling (CVE-2026-52859)

    * vim: Vim: Denial of Service via crafted spell file (CVE-2026-55892)

    * vim: Vim: Denial of Service via out-of-bounds write in spell sound-folding (CVE-2026-59857)

    * vim: Vim: Arbitrary command execution via crafted vimball (CVE-2026-73076)

    * vim: Vim: Heap buffer overflow allows arbitrary code execution (CVE-2026-73072)

    * vim: Vim: Arbitrary Code Execution via Crafted Netrw Menu Entries (CVE-2026-73078)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:66336 advisory.

    * vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal     emulator (CVE-2026-28420)

    * vim: Vim: Denial of Service via out-of-bounds write in terminal handling (CVE-2026-52859)

    * vim: Vim: Denial of Service via crafted spell file (CVE-2026-55892)

    * vim: Vim: Denial of Service via out-of-bounds write in spell sound-folding (CVE-2026-59857)

    * vim: Vim: Arbitrary command execution via crafted vimball (CVE-2026-73076)

    * vim: Vim: Heap buffer overflow allows arbitrary code execution (CVE-2026-73072)

    * vim: Vim: Arbitrary Code Execution via Crafted Netrw Menu Entries (CVE-2026-73078)

    * vim: Vim: Arbitrary Code Execution via Insecure Shell Command Handling (CVE-2026-73077)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1816:23 advisory.

    * vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal     emulator (CVE-2026-28420)
      * vim: Vim: Denial of Service via out-of-bounds write in terminal handling (CVE-2026-52859)
      * vim: Vim: Denial of Service via crafted spell file (CVE-2026-55892)
      * vim: Vim: Denial of Service via out-of-bounds write in spell sound-folding (CVE-2026-59857)
      * vim: Vim: Arbitrary command execution via crafted vimball (CVE-2026-73076)
      * vim: Vim: Heap buffer overflow allows arbitrary code execution (CVE-2026-73072)
      * vim: Vim: Arbitrary Code Execution via Crafted Netrw Menu Entries (CVE-2026-73078)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1861:24 advisory.

    * vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal     emulator (CVE-2026-28420)
      * vim: Vim: Denial of Service via out-of-bounds write in terminal handling (CVE-2026-52859)
      * vim: Vim: Denial of Service via crafted spell file (CVE-2026-55892)
      * vim: Vim: Denial of Service via out-of-bounds write in spell sound-folding (CVE-2026-59857)
      * vim: Vim: Arbitrary command execution via crafted vimball (CVE-2026-73076)
      * vim: Vim: Heap buffer overflow allows arbitrary code execution (CVE-2026-73072)
      * vim: Vim: Arbitrary Code Execution via Crafted Netrw Menu Entries (CVE-2026-73078)
      * vim: Vim: Arbitrary Code Execution via Insecure Shell Command Handling (CVE-2026-73077)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_66348 advisory.

    * vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal     emulator (CVE-2026-28420)

    * vim: Vim: Denial of Service via out-of-bounds write in terminal handling (CVE-2026-52859)

    * vim: Vim: Denial of Service via crafted spell file (CVE-2026-55892)

    * vim: Vim: Denial of Service via out-of-bounds write in spell sound-folding (CVE-2026-59857)

    * vim: Vim: Arbitrary command execution via crafted vimball (CVE-2026-73076)

    * vim: Vim: Heap buffer overflow allows arbitrary code execution (CVE-2026-73072)

    * vim: Vim: Arbitrary Code Execution via Crafted Netrw Menu Entries (CVE-2026-73078)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_66336 advisory.

    * vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal     emulator (CVE-2026-28420)

    * vim: Vim: Denial of Service via out-of-bounds write in terminal handling (CVE-2026-52859)

    * vim: Vim: Denial of Service via crafted spell file (CVE-2026-55892)

    * vim: Vim: Denial of Service via out-of-bounds write in spell sound-folding (CVE-2026-59857)

    * vim: Vim: Arbitrary command execution via crafted vimball (CVE-2026-73076)

    * vim: Vim: Heap buffer overflow allows arbitrary code execution (CVE-2026-73072)

    * vim: Vim: Arbitrary Code Execution via Crafted Netrw Menu Entries (CVE-2026-73078)

    * vim: Vim: Arbitrary Code Execution via Insecure Shell Command Handling (CVE-2026-73077)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_66366 advisory.

    * vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal     emulator (CVE-2026-28420)

    * vim: Vim: Denial of Service via out-of-bounds write in terminal handling (CVE-2026-52859)

    * vim: Vim: Denial of Service via crafted spell file (CVE-2026-55892)

    * vim: Vim: Denial of Service via out-of-bounds write in spell sound-folding (CVE-2026-59857)

    * vim: Vim: Arbitrary command execution via crafted vimball (CVE-2026-73076)

    * vim: Vim: Heap buffer overflow allows arbitrary code execution (CVE-2026-73072)

    * vim: Vim: Arbitrary Code Execution via Crafted Netrw Menu Entries (CVE-2026-73078)

    * vim: Vim: Arbitrary Code Execution via Insecure Shell Command Handling (CVE-2026-73077)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Vim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a     crafted vimball member named .VimballRecord to overwrite the installation record with attacker-chosen     commands. When vimball#RmVimball() later processes the matching record entry, the stored Ex commands,     including operating-system commands invoked through :!, execute with the privileges of the user running     Vim. This issue is fixed in version 9.2.0847. (CVE-2026-73076)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名稱	產品	系列	已發布	已更新	嚴重性
344637	RHEL 8 : vim (RHSA-2026:66348)	Nessus	Red Hat Local Security Checks	2026/9/10	2026/10/7	high
344838	RockyLinux 10 : vim (RLSA-2026:66336)	Nessus	Rocky Linux Local Security Checks	2026/9/11	2026/10/7	high
345591	MiracleLinux 8 : vim-8.0.1763-31.el8_10.7.ML.1 (AXSA:2026-1816:23)	Nessus	Miracle Linux Local Security Checks	2026/9/14	2026/10/7	high
346817	MiracleLinux 9 : vim-8.2.2637-26.el9_8.21.ML.1 (AXSA:2026-1861:24)	Nessus	Miracle Linux Local Security Checks	2026/9/17	2026/10/7	high
354321	Rocky Linux 8 [CIQ] Security Update: vim-X11 / vim-X11-debuginfo / vim-common / vim-common-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_66348)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/7	high
354675	Rocky Linux 10.2 [CIQ] Security Update: vim-X11 / vim-X11-debuginfo / vim-common / vim-data / vim-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_66336)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/7	high
354878	Rocky Linux 9 [CIQ] Security Update: vim-X11 / vim-X11-debuginfo / vim-common / vim-common-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_66366)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/7	high
334638	Linux Distros Unpatched Vulnerability : CVE-2026-73076	Nessus	Misc.	2026/8/12	2026/11/12	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high

high