The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3993-1 advisory.

    - code execution upon opening arbitrary file (bsc#1275941).
    - CVE-2026-77219: memory leak via the PBM/PPM/PGM image loader (bsc#1276264).
    - CVE-2026-79992: zero-click local command execution via TRAMP (bsc#1275927).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_80507 advisory.

    * emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image (CVE-2026-77219)

    * emacs: local shell command injection through the user field in emacs tramp (CVE-2026-79992)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2066:02 advisory.

    * emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image (CVE-2026-77219)
      * emacs: local shell command injection through the user field in emacs tramp (CVE-2026-79992)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:80506 advisory.

    * emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image (CVE-2026-77219)

    * emacs: local shell command injection through the user field in emacs tramp (CVE-2026-79992)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793361300 advisory.

  - A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing     maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper     sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitrary code     execution. (CVE-2026-79992)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792623317 advisory.

  - GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-     user-regexp has an incomplete list of disallowed inputs. NOTE: this issue exists because of an incomplete     fix for CVE-2026-79992. (CVE-2026-108976)

  - A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing     maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper     sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitrary code     execution. (CVE-2026-79992)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2147 advisory.

    GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an     attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated     max color index. The image loader multiplies image dimensions and channel count using signed integer     arithmetic; for sufficiently large values, the result wraps to a negative number, bypassing the bounds     check and causing the pixel reader to access heap memory past the end of the allocated buffer. The over-     read contents are interpreted as pixel color values and rendered on screen. (CVE-2026-77219)

    A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing     maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper     sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitrary code     execution. (CVE-2026-79992)

    GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted     value of read-symbol-shorthands affects the intern and unintern functions. This affects the default     configuration; no particular user settings are required to trigger it. (CVE-2026-96269)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of emacs installed on the remote host is prior to 27.2-4. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3944 advisory.

    GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an     attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated     max color index. The image loader multiplies image dimensions and channel count using signed integer     arithmetic; for sufficiently large values, the result wraps to a negative number, bypassing the bounds     check and causing the pixel reader to access heap memory past the end of the allocated buffer. The over-     read contents are interpreted as pixel color values and rendered on screen. (CVE-2026-77219)

    A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing     maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper     sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitrary code     execution. (CVE-2026-79992)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_80506 advisory.

    * emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image (CVE-2026-77219)

    * emacs: local shell command injection through the user field in emacs tramp (CVE-2026-79992)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2047:01 advisory.

    * emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image (CVE-2026-77219)
      * emacs: local shell command injection through the user field in emacs tramp (CVE-2026-79992)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:84591 advisory.

    * emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image (CVE-2026-77219)
      * emacs: emacs: Command injection via crafted filenames in TRAMP (CVE-2026-79992)
      * emacs: Emacs: arbitrary code execution in Flymake mode (CVE-2026-96442)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142367 advisory.

    A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing     maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper     sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitrary code     execution.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:98574 advisory.

    GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing     features, a scripting language (elisp), and the capability to read e-mail and news.

    Security Fix(es):

    * emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image (CVE-2026-77219)

    * emacs: emacs: Command injection via crafted filenames in TRAMP (CVE-2026-79992)

    * emacs: Emacs: arbitrary code execution in Flymake mode (CVE-2026-96442)

    * emacs: GNU Emacs: Arbitrary code execution upon opening a file (CVE-2026-96269)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
348445	SUSE SLES12 Security Update : emacs (SUSE-SU-2026:3993-1)	Nessus	SuSE Local Security Checks	2026/9/21	2026/9/21	medium
365587	Rocky Linux 9 [CIQ] Security Update: emacs / emacs-common / emacs-common-debuginfo / emacs-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_80507)	Nessus	Rocky Linux Local Security Checks	2026/10/14	2026/10/14	medium
366372	MiracleLinux 8 : emacs-26.1-15.el8_10.2 (AXSA:2026-2066:02)	Nessus	Miracle Linux Local Security Checks	2026/10/16	2026/10/16	medium
369175	RockyLinux 8 : emacs (RLSA-2026:80506)	Nessus	Rocky Linux Local Security Checks	2026/10/21	2026/10/21	medium
375669	CentOS Linux 7 [TuxCare] Security Update: emacs / emacs-common / emacs-el / emacs-filesystem / emacs-nox / etc (CENTOS7:CLSA-2026:1793361300)	Nessus	CentOS Local Security Checks	2026/11/3	2026/11/3	high
370237	Rocky Linux 9.6 [TuxCare] Security Update: emacs / emacs-common / emacs-devel / emacs-filesystem / emacs-lucid / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792623317)	Nessus	Rocky Linux Local Security Checks	2026/10/22	2026/10/29	high
345770	Amazon Linux 2023 : emacs, emacs-common, emacs-devel (ALAS2023-2026-2147)	Nessus	Amazon Linux Local Security Checks	2026/9/14	2026/11/4	high
351014	Amazon Linux 2 : emacs (ALAS-2026-3944)	Nessus	Amazon Linux Local Security Checks	2026/9/29	2026/9/29	medium
365591	Rocky Linux 8 [CIQ] Security Update: emacs / emacs-common / emacs-common-debuginfo / emacs-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_80506)	Nessus	Rocky Linux Local Security Checks	2026/10/14	2026/10/14	medium
365682	MiracleLinux 9 : emacs-27.2-18.el9_8.2 (AXSA:2026-2047:01)	Nessus	Miracle Linux Local Security Checks	2026/10/14	2026/10/14	medium
369096	AlmaLinux 10 : emacs (ALSA-2026:84591)	Nessus	Alma Linux Local Security Checks	2026/10/21	2026/10/23	medium
370094	Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: emacs (UTSA-2026-142367)	Nessus	Unity Linux Local Security Checks	2026/10/21	2026/10/21	high
379011	RHEL 10 : emacs (RHSA-2026:98574)	Nessus	Red Hat Local Security Checks	2026/11/11	2026/11/11	high

检测

插件搜索

medium

medium

medium

medium

high

high

high

medium

medium

medium

medium

high

high