AZL-82010

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-82010.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-82010

Upstream

CVE-2026-39881

Published

2026-04-08T21:17:00Z

Modified

2026-08-28T17:47:55Z

Summary

CVE-2026-39881 affecting package vim for versions less than 9.2.0323-1

Details

Vim is an open source, command line text editor. Prior to 9.2.0316, a command injection vulnerability in Vim's netbeans interface allows a malicious netbeans server to execute arbitrary Ex commands when Vim connects to it, via unsanitized strings in the defineAnnoType and specialKeys protocol messages. This vulnerability is fixed in 9.2.0316.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-39881

Affected packages

Azure Linux:3 / vim

Package

Name: vim
Purl: pkg:rpm/azure-linux/vim

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

9.2.0323-1

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-82010.json"