CVE-2026-96269
Quick assessment
Affected
GNU Emacs
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the default configuration; no particular user settings are required to
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-96269
Vulnerability Information
Shenlong is analyzing...
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the default configuration; no particular user settings are required to trigger it.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
从非可信控制范围包含功能例程
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-96269
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-96269
请登录查看更多情报信息。
Other References for CVE-2026-96269 (2)
IV. Related Vulnerabilities
Same product: Emacs
-
CVE-2026-77219
GNU Emacs < 31.0.91 Heap Over-Read via PBM/PPM/PGM Image Loa -
CVE-2026-71394
Heap Use of Uninitialized Memory in GNU Emacs for Android -
CVE-2026-71393
Heap Buffer Overflow in GNU Emacs for Android -
CVE-2026-71392
Integer Overflow in GNU Emacs for Android -
CVE-2026-71391
Off-by-One Error in GNU Emacs for Android
Same vendor: GNU
-
CVE-2026-91782
GNU Binutils Dynamic Relocation Allocation elfxx-x86.c elf_x -
CVE-2026-91781
GNU Binutils ELF Section elf64-x86-64.c elf_x86_64_common_se -
CVE-2026-91780
GNU Binutils elflink.c elf_link_add_object_symbols null poin -
CVE-2026-91779
GNU Binutils Eh Frame elf-eh-frame.c _bfd_elf_eh_frame_secti -
CVE-2026-91752
GNU libextractor before 1.15 Stack Overflow via OLE2
Same weakness: CWE-829
-
CVE-2026-93993
Mistral Vibe before 2.25.5 Remote Code Execution via git pos -
CVE-2026-81305
CareCam CM2507 Inclusion of Functionality from Untrusted Con -
CVE-2026-89332
Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Wri -
CVE-2026-0303
Checkov by Prisma Cloud: Code Execution via Auto-Loaded Conf -
CVE-2026-79721
MLflow 软件供应链问题漏洞
V. Comments for CVE-2026-96269
No comments yet