CVE-2026-108976
Quick assessment
Affected
GNU Emacs
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
GNU Emacs 31.2 之前版本（以及 TRAMP 2.8.2 之前版本）允许通过文件名进行操作系统命令注入，原因是 tramp-user-regexp 中禁止输入列表不完整。注意：此问题是由于对 CVE-2026-79992 的修复不完整所导致。
Possible ATT&CK Techniques 1 AI
T1059.004 · Unix Shell
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-108976
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inputs. NOTE: this issue exists because of an incomplete fix for CVE-2026-79992.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
不完整的黑名单
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-108976
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-108976
请登录查看更多情报信息。
Mailing List Discussions for CVE-2026-108976 (2)
Other References for CVE-2026-108976 (1)
IV. Related Vulnerabilities
Same product: Emacs
-
CVE-2026-96269
Emacs 28.1-31.1 read-symbol-shorthands远程代码执行漏洞 -
CVE-2026-77219
GNU Emacs < 31.0.91 Heap Over-Read via PBM/PPM/PGM Image Loa -
CVE-2026-71394
Heap Use of Uninitialized Memory in GNU Emacs for Android -
CVE-2026-71393
Heap Buffer Overflow in GNU Emacs for Android -
CVE-2026-71392
Integer Overflow in GNU Emacs for Android
Same vendor: GNU
-
CVE-2026-75820
Integer Truncation Leading to Heap Corruption in GNU Aspell -
CVE-2026-75819
Out-of-bounds Read in GNU Aspell -
CVE-2026-75818
Heap Buffer Overflow in GNU Aspell's prezip utility -
CVE-2026-97876
Bypass of GRUB lockdown restriction in Secure Boot mode via -
CVE-2026-100310
GNU libextractor before 1.16 Privilege Escalation via LIBEXT
Same weakness: CWE-184
-
CVE-2026-107322
OS command injection in Amazon Agent Plugins for AWS databas -
CVE-2026-106445
Handlebars: JavaScript Injection via Own Property Check Bypa -
CVE-2026-106442
Hydra instantiate target blacklist bypasses permit code exec -
CVE-2026-106218
TeamCity <2026.1.3 Kotlin DSL沙箱逃逸致RCE -
CVE-2026-105648
Ghost: Private IP Filtering Bypass via IPv6 Transition Addre
V. Comments for CVE-2026-108976
No comments yet