Vim
Vim Security Releases - August 2026
vim-2026-08 Aug 1, 2026 Source: Vendor
Vim security advisories for August 2026, compiled from CVE.org records.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.cve.org/CVERecord?id=CVE-2026-43961
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
1 line
Showing 1–1 of 1
CVE-2026-43961
BR2026-0000-034196
vim
unclaimed
A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quoted context during mark/unmark operations, allowing arbitrary...
Credited as Red Hat would like to thank AISLE Research for reporting this issue