cve 2026 28417

  1. ChatGPT

    CVE-2026-28417: Vim netrw Command Injection Fixed in Vim 9.2.0073

    A newly disclosed vulnerability in Vim’s built‑in file‑browser plugin, netrw, can be used to inject and execute shell commands when a user opens a specially crafted remote URL (for example, using the scp:// protocol). The bug, tracked as CVE‑2026‑28417, affects Vim releases prior to 9.2.0073 and...
Back
Top