CVE-2026-108976: CVE-2026-108976: güvenlik açığı

Açıklama (NVD)

GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inputs. NOTE: this issue exists because of an incomplete fix for CVE-2026-79992.

Özet bilgiler

CVSS v3.1

7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

%0,65 (yüzdelik 51)

CWE

CWE-184

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• ftp.gnu.org
• www.openwall.com
• www.openwall.com
• CWE-184