All 8 CVE vulnerabilities found in nnn, with AI-generated Chinese analysis, references, and POCs.
Vendor: jarun
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-121550 | nnn through 5.3 Symlink-Following Write via NNN_FIFO Handling CWE-59 | 3.3 | Low | 2026-11-03 |
| CVE-2026-121549 | nnn through 5.3 Insecure Temporary File Symlink Overwrite via pdfread and nuke Plugins CWE-377 | 4.4 | Medium | 2026-11-03 |
| CVE-2026-121548 | nnn through 5.3 OS Command Injection via togglex Plugin CWE-78 | 7.8 | High | 2026-11-03 |
| CVE-2026-65612 | Shell Command Injection in nnn CWE-78 | 5.1 | Medium | 2026-08-19 |
| CVE-2026-65611 | Shell Command Injection in nnn CWE-78 | 5.1 | Medium | 2026-08-19 |
| CVE-2026-65610 | Numeric Truncation Error in nnn CWE-197 | 2.4 | Low | 2026-08-19 |
| CVE-2026-65609 | Out-of-bounds write in nnn CWE-787 | 2.4 | Low | 2026-08-19 |
| CVE-2025-13566 | jarun nnn nnn.c run_cmd_as_plugin double free CWE-415 | 3.3 | Low | 2025-11-23 |
All 8 known CVE vulnerabilities affecting nnn with full Chinese analysis, references, and POCs where available.