Skip to main content
CVE-2026-55693VulnerabilityPublished Updated

Red Hat Security Advisory: vim security update

Affects Red Hat vimSource GCVE Database

0
Compare

Mentioned vulnerabilities

Not known to be exploited.

Data as of 30 Oct 2026, 01:01 UTC

Severity
High

Rated by Threat Radar · No CVSS score from NVD or the CNA

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 29 Jul 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 29 Oct 2026.

What to do

AI-suggested

Red Hat has released updated Vim packages for Red Hat Enterprise Linux 9 and related variants that address these vulnerabilities. Users should apply the security update as detailed in the Red Hat advisory (RHSA-2026:47982) to remediate these issues. No additional mitigation steps are indicated beyond applying the official update.

Description

Multiple security vulnerabilities have been identified in Vim (Vi IMproved), including denial of service via stack out-of-bounds write, out-of-bounds write in spell file word count, and arbitrary code or command execution via crafted inputs in omni-completion and tags files. These vulnerabilities affect Red Hat Enterprise Linux 9 and related variants. Red Hat has issued an important security advisory with updates to address these issues.

References

Community reviews

Loading reviews…