PT-2026-45007 · Vim · Vim

CVE-2026-43961 · Published 2026-05-14 · Updated 2026-07-16

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.2.480

Description The software constructs all or part of a code segment using externally-influenced input from an upstream component without properly neutralizing special elements. This can modify the syntax or behavior of the intended code segment, impacting confidentiality, integrity, and availability. This issue is a form of code injection, where an attacker can introduce malicious code into a program.

Recommendations Update to version 9.2.480.

Related Identifiers

CVE-2026-43961

ECHO-1A5A-3AD1-CE32

OESA-2026-2553

OESA-2026-2554

OESA-2026-2686

OESA-2026-2687

OPENSUSE-SU-2026:11114-1

SUSE-SU-2026:21833-1

SUSE-SU-2026:2313-1

USN-8415-1

Affected Products

Vim

References · 41

• https://nvd.nist.gov/vuln/detail/CVE-2026-43961 · Security Note
• https://ubuntu.com/security/notices/USN-8415-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46483 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2026-43961 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2686 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2554 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:21833-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8415-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43961 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43961 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43961 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-43961 · Security Note
• https://osv.dev/vulnerability/OESA-2026-2687 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-43961 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2553 · Vendor Advisory