Threats Tagged 'cve-2026-41411'

A command injection vulnerability (CVE-2026-41411) in Vim (Vi IMproved) allows arbitrary code execution via malicious tag files. This issue affects Red Hat Enterprise Linux 10 and related variants. Red Hat has released a security update to address this moderate severity vulnerability. The update fixes the flaw by patching Vim packages to prevent exploitation through crafted tag files.

Multiple security vulnerabilities have been identified in Vim (Vi IMproved) editor affecting Red Hat Enterprise Linux 9.2. These include arbitrary command execution via modeline sandbox bypass, arbitrary file overwrite through path traversal in the zip.vim plugin, command injection via malicious tag files, and command injection when decompressing .tgz archives. Red Hat has issued an important security advisory with updates addressing these issues. The vulnerabilities are rated with high severity and affect various Red Hat Enterprise Linux 9.2 variants. Users are advised to apply the provided security updates to mitigate these risks.