Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Vim is an open source, command line text editor. Prior to version 9.2.0383, an OS command injection vulnerability exists in the netrw standard plugin bundled with Vim. By inducing a user to open a crafted URL (e.g., using the sftp:// or file:// protocol handlers), an attacker can execute arbitrary shell commands with the privileges of the Vim process. This issue has been patched in version 9.2.0383.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-42307 Vim is an open source, command line text editor. Prior to version 9.2.0383, an OS command injection vulnerability exists in the netrw standard plugin bundled with Vim… https://www.cve.org/CVERecord?id=CVE-2026-42307
Post summary
Vulnerability CVE-2026-42307 is an OS command injection flaw in Vim's netrw plugin that affects versions prior to 9.2.0383.
CVE-2026-42307 OS Command Injection in Vim Netrw Plugin Prior to Version 9.2.0383 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-42307
Post summary
The text announces CVE‑2026‑42307, noting an OS command injection in Vim Netrw before version 9.2.0383, without providing PoC, exploit details, or active exploitation evidence.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | vim | vim | - | - | - |