The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-38509 advisory.

    - RHEL-186660 CVE-2026-47162 vim: netrw code injection via NetrwBookHistSave()
    - RHEL-186671 CVE-2026-52858 vim: possible code execution with python3complete
    - RHEL-185867 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin
    - RHEL-178233 CVE-2026-46483 vim: command injection in tar plugin
    - RHEL-171481 CVE-2026-41411 vim: Command injection via backticks in tag files
    - RHEL-170123 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite       via path traversal bypass

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Vim installed on the remote host is prior to 9.2.0496. It is, therefore, affected by a vulnerability as referenced in the GHSA-4473-94jm-w5x9 advisory.

  - A code injection vulnerability exists in s:stepmatch() in the cucumber filetype plugin     (runtime/ftplugin/cucumber.vim) on Vim builds with +ruby support. Step-definition patterns read from .rb     files under the repository's features/*/ or stories/*/ directories are embedded into a Ruby Kernel.eval     argument without sufficient escaping, allowing a crafted pattern in an attacker-controlled repository to     execute arbitrary Ruby (and through it arbitrary shell commands) when the user invokes a step-jump mapping     ([d, ]d). (CVE-2026-47167)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1312:17 advisory.

    * vim: command injection when decompressing .tgz archives (CVE-2026-46483)
      * vim: Vim: Arbitrary Code Execution via crafted directory names (CVE-2026-47162)
      * vim: Vim: Arbitrary code execution via Python omni-completion (CVE-2026-52858)
      * vim: Vim: Arbitrary code execution via crafted step-definition patterns (CVE-2026-47167)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55431 advisory.

    Vim (Vi IMproved) is an updated and improved version of the vi editor.

    Security Fix(es):

    * vim: Vim: Arbitrary Code Execution via crafted directory names (CVE-2026-47162)

    * vim: Vim: Arbitrary code execution via Python omni-completion (CVE-2026-52858)

    * vim: Vim: Arbitrary code execution via crafted step-definition patterns (CVE-2026-47167)

    * vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo() (CVE-2026-57455)

    * vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion (CVE-2026-57456)

    * vim: Vim: Out-of-bounds Write in Spell File Word Count (CVE-2026-55693)

    * vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion (CVE-2026-59856)

    * vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion (CVE-2026-59858)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3368 advisory.

    Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection     vulnerability exists in s:NetrwBookHistSave() in the netrw plugin     (runtime/pack/dist/opt/netrw/autoload/netrw.vim) when serializing browsed directory paths to the history     file ~/.vim/.netrwhist. A directory name derived from the filesystem is interpolated into a single-quoted     Vimscript string literal without escaping embedded single quotes, allowing a crafted directory name to     break out of the string context and execute arbitrary Vimscript, including shell commands via system() and     :!, the next time the history file is sourced. This issue has been patched in version 9.2.0495.
    (CVE-2026-47162)

    Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability     exists in s:stepmatch() in the cucumber filetype plugin (runtime/ftplugin/cucumber.vim) on Vim builds with     +ruby support. Step-definition patterns read from .rb files under the repository's features/*/ or     stories/*/ directories are embedded into a Ruby Kernel.eval argument without sufficient escaping, allowing     a crafted pattern in an attacker-controlled repository to execute arbitrary Ruby (and through it arbitrary     shell commands) when the user invokes a step-jump mapping ([d, ]d). This issue has been patched in version     9.2.0496. (CVE-2026-47167)

    Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion     script in python3complete.vim for Vim with the +python3 interpreter enabled (and the legacy     pythoncomplete.vim for builds with the +python interpreter) executes the import and from statements found     in the current buffer through Python's import machinery. Because the buffer's working directory is on     sys.path, opening a hostile .py file with a sibling Python package and invoking omni-completion runs that     package's top-level code as the editing user. This issue has been patched in version 9.2.0561.
    (CVE-2026-52858)

    Vim is an open source, command line text editor. Prior to version 9.2.0597, Vim's Python omni-completion     executes reconstructed function and class definitions from the current buffer with exec() as part of     populating the completion dictionary. Python evaluates function default values, parameter annotations, and     class base expressions at definition time, so a hostile buffer can execute attacker-controlled Python     expressions during omni-completion. The existing g:pythoncomplete_allow_import mitigation (GHSA-52mc-     rq6p-rc7c) does not cover this path, because the attacker-controlled code is not a harvested import/from     statement. This issue has been patched in version 9.2.0597. (CVE-2026-52860)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-38511 advisory.

    - RHEL-186659 CVE-2026-47162 vim: code injection via       NetrwBookHistSave()
    - RHEL-186646 CVE-2026-52858 vim: possible code execution with       python3complete
    - RHEL-185874 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin
    - RHEL-178243 CVE-2026-46483 vim: command injection in tar plugin
    - CVE-2026-41411 vim: Command injection via backticks in tag files
    - RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite       via path traversal bypass

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0857 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2026-46483:
    Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability     exists in tar#Vimuntar() in     runtime/autoload/tar.vim when decompressing .tgz archives on Unix-like systems. The function builds     :!gunzip and :!gzip -d commands using shellescape(tartail) without the {special} flag, allowing a crafted     archive filename to trigger Vim cmdline-special expansion and execute shell commands in the user's     context. This vulnerability is fixed in 9.2.0479.

    CVE-2026-47162:
    Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection     vulnerability exists in s:NetrwBookHistSave() in the netrw plugin     (runtime/pack/dist/opt/netrw/autoload/netrw.vim) when serializing browsed directory paths to the history     file ~/.vim/.netrwhist. A directory name derived from the filesystem is interpolated into a single-quoted     Vimscript string literal without escaping embedded single quotes, allowing a crafted directory name to     break out of the string context and execute arbitrary Vimscript, including shell commands via system() and     :!, the next time the history file is sourced. This issue has been patched in version 9.2.0495.

    CVE-2026-47167:
    Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability     exists in s:stepmatch() in the cucumber filetype plugin (runtime/ftplugin/cucumber.vim) on Vim builds with     +ruby support. Step-definition patterns read from .rb files under the repository's features/*/ or     stories/*/ directories are embedded into a Ruby Kernel.eval argument without sufficient escaping, allowing     a crafted pattern in an attacker-controlled repository to execute arbitrary Ruby (and through it arbitrary     shell commands) when the user invokes a step-jump mapping ([d, ]d). This issue has been patched in version     9.2.0496.

    CVE-2026-52858:
    Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion     script in python3complete.vim for Vim with the +python3 interpreter enabled (and the legacy     pythoncomplete.vim for builds with the +python interpreter) executes the import and from statements found     in the current buffer through Python's import machinery. Because the buffer's working directory is on     sys.path, opening a hostile .py file with a sibling Python package and invoking omni-completion runs that     package's top-level code as the editing user. This issue has been patched in version 9.2.0561.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8451-1 advisory.

    Srinivas Piskala Ganesh Babu discovered that Vim incorrectly handled directory names when serializing     browsed paths to the netrw history file. An attacker could possibly use this issue to execute arbitrary     code. (CVE-2026-47162)

    It was discovered that Vim incorrectly handled step-definition patterns in the cucumber filetype plugin.
    An attacker could possibly use this issue to execute arbitrary code. (CVE-2026-47167)

    It was discovered that Vim incorrectly handled import statements during Python omni-completion. An     attacker could possibly use this issue to execute arbitrary code. (CVE-2026-52858)

    Andrej Tomi discovered that Vim incorrectly handled certain terminal screen cells when taking a     snapshot, leading to an out-of-bounds read. An attacker could possibly use this issue to cause Vim to     crash, resulting in a denial of service. (CVE-2026-52859)

    David Carliez discovered that Vim incorrectly handled reconstructed function and class definitions during     Python omni-completion. An attacker could possibly use this issue to execute arbitrary code.
    (CVE-2026-52860)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 46 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-bb39640a6c advisory.

    Update neovim and tree-sitter

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the vim package has been released.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:38510 advisory.

    * vim: command injection when decompressing .tgz archives (CVE-2026-46483)
      * vim: Vim: Arbitrary Code Execution via crafted directory names (CVE-2026-47162)
      * vim: Vim: Arbitrary code execution via Python omni-completion (CVE-2026-52858)
      * vim: Vim: Arbitrary code execution via crafted step-definition patterns (CVE-2026-47167)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:38509 advisory.

    * vim: command injection when decompressing .tgz archives (CVE-2026-46483)

    * vim: Vim: Arbitrary Code Execution via crafted directory names (CVE-2026-47162)

    * vim: Vim: Arbitrary code execution via Python omni-completion (CVE-2026-52858)

    * vim: Vim: Arbitrary code execution via crafted step-definition patterns (CVE-2026-47167)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:38510 advisory.

    * vim: command injection when decompressing .tgz archives (CVE-2026-46483)

    * vim: Vim: Arbitrary Code Execution via crafted directory names (CVE-2026-47162)

    * vim: Vim: Arbitrary code execution via Python omni-completion (CVE-2026-52858)

    * vim: Vim: Arbitrary code execution via crafted step-definition patterns (CVE-2026-47167)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:38511 advisory.

    * vim: command injection when decompressing .tgz archives (CVE-2026-46483)

    * vim: Vim: Arbitrary Code Execution via crafted directory names (CVE-2026-47162)

    * vim: Vim: Arbitrary code execution via Python omni-completion (CVE-2026-52858)

    * vim: Vim: Arbitrary code execution via crafted step-definition patterns (CVE-2026-47167)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the vim-8.2.2637-33.el9 build changelog.

  - command injection in tar plugin (CVE-2026-46483)

  - Code Injection in cucumber filetype plugin (CVE-2026-47167)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-38510 advisory.

    - RHEL-186656 CVE-2026-47162 vim: netrw code injection via NetrwBookHistSave
    - RHEL-186648 CVE-2026-52858 vim: possible code execution with python3complete
    - CVE-2026-47167 vim: Code Injection in cucumber filetype plugin

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
328758	Oracle Linux 10 : vim (ELSA-2026-38509)	Nessus	Oracle Linux Local Security Checks	2026/7/21	2026/7/21	high
321504	Vim < 9.2.0496 Code Injection (GHSA-4473-94jm-w5x9)	Nessus	Misc.	2026/6/18	2026/8/26	medium
328692	MiracleLinux 8 : vim-8.0.1763-27.el8_10.ML.1 (AXSA:2026-1312:17)	Nessus	Miracle Linux Local Security Checks	2026/7/21	2026/7/21	high
335923	RHEL 10 : vim (RHSA-2026:55431)	Nessus	Red Hat Local Security Checks	2026/8/17	2026/8/21	high
321989	Amazon Linux 2 : vim, --advisory ALAS2-2026-3368 (ALAS-2026-3368)	Nessus	Amazon Linux Local Security Checks	2026/6/22	2026/6/26	high
326805	Oracle Linux 9 : vim (ELSA-2026-38511)	Nessus	Oracle Linux Local Security Checks	2026/7/14	2026/7/14	high
337134	TencentOS Server 3: vim (TSSA-2026:0857)	Nessus	Tencent Local Security Checks	2026/8/18	2026/8/18	high
321762	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : Vim vulnerabilities (USN-8451-1)	Nessus	Ubuntu Local Security Checks	2026/6/20	2026/6/20	high
339502	Fedora 46 : neovim / tree-sitter (2026-bb39640a6c)	Nessus	Fedora Local Security Checks	2026/8/25	2026/8/25	medium
325971	Photon OS 4.0: Vim PHSA-2026-4.0-1049	Nessus	PhotonOS Local Security Checks	2026/7/9	2026/7/15	high
323929	Photon OS 5.0: Vim PHSA-2026-5.0-0908	Nessus	PhotonOS Local Security Checks	2026/6/30	2026/7/15	high
335189	AlmaLinux 8 : vim (ALSA-2026:38510)	Nessus	Alma Linux Local Security Checks	2026/8/13	2026/8/13	high
334534	RockyLinux 10 : vim (RLSA-2026:38509)	Nessus	Rocky Linux Local Security Checks	2026/8/11	2026/8/11	high
334535	RockyLinux 8 : vim (RLSA-2026:38510)	Nessus	Rocky Linux Local Security Checks	2026/8/11	2026/8/11	high
334536	RockyLinux 9 : vim (RLSA-2026:38511)	Nessus	Rocky Linux Local Security Checks	2026/8/11	2026/8/11	high
328037	CentOS 9 : vim-8.2.2637-33.el9	Nessus	CentOS Local Security Checks	2026/7/20	2026/7/20	medium
326663	Oracle Linux 8 : vim (ELSA-2026-38510)	Nessus	Oracle Linux Local Security Checks	2026/7/14	2026/7/14	high

检测

插件搜索

high

medium

high

high

high

high

high

high

medium

high

high

high

high

high

high

medium

high