{"schema":"vulnpedia.research/1","cve":"CVE-2026-43961","references":[{"url":"https://access.redhat.com/errata/RHSA-2026:57614","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat","modified":"2026-10-16T17:42:53.961Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2026-10-16T17:42:53.961Z","url":"https://access.redhat.com/errata/RHSA-2026:57614"},{"source":"nvd","sourceId":"CVE-2026-43961","modified":"2026-10-16T18:17:57.847","url":"https://access.redhat.com/errata/RHSA-2026:57614"},{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://access.redhat.com/errata/RHSA-2026:57614"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-43961","tags":["vdb-entry","x_refsource_REDHAT","vendor-reference"],"source":"mitre","sourceId":"redhat","modified":"2026-10-16T17:42:53.961Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2026-10-16T17:42:53.961Z","url":"https://access.redhat.com/security/cve/CVE-2026-43961"},{"source":"nvd","sourceId":"CVE-2026-43961","modified":"2026-10-16T18:17:57.847","url":"https://access.redhat.com/security/cve/CVE-2026-43961"},{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-43961"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460434","tags":["issue-tracking","x_refsource_REDHAT","vendor-reference"],"source":"mitre","sourceId":"redhat","modified":"2026-10-16T17:42:53.961Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2026-10-16T17:42:53.961Z","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460434"},{"source":"nvd","sourceId":"CVE-2026-43961","modified":"2026-10-16T18:17:57.847","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460434"},{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460434"}]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-66hr-7p6x-x5j3","tags":["vendor-reference"],"source":"mitre","sourceId":"redhat","modified":"2026-10-16T17:42:53.961Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2026-10-16T17:42:53.961Z","url":"https://github.com/vim/vim/security/advisories/GHSA-66hr-7p6x-x5j3"},{"source":"nvd","sourceId":"CVE-2026-43961","modified":"2026-10-16T18:17:57.847","url":"https://github.com/vim/vim/security/advisories/GHSA-66hr-7p6x-x5j3"},{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://github.com/vim/vim/security/advisories/GHSA-66hr-7p6x-x5j3"}]},{"url":"http://www.openwall.com/lists/oss-security/2026/05/14/7","tags":[],"source":"mitre","sourceId":"CVE","modified":"2026-08-19T14:15:30.768Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2026-08-19T14:15:30.768Z","url":"http://www.openwall.com/lists/oss-security/2026/05/14/7"},{"source":"nvd","sourceId":"CVE-2026-43961","modified":"2026-10-16T18:17:57.847","url":"http://www.openwall.com/lists/oss-security/2026/05/14/7"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-43961","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-43961"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43961","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43961"}]},{"source":"euvd","sourceId":"EUVD-2026-62411","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-62411","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-62411","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-62411"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json","productId":"Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src","product":"vim-0:9.2.967-1.1.hum1@src as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:57614"},{"category":"workaround","details":"To mitigate this issue, users should avoid browsing untrusted directories or interacting with files from untrusted sources using Vim's netrw plugin. Exercise caution when opening directories that may contain maliciously crafted filenames."}],"purl":"pkg:rpm/redhat/vim@9.2.967-1.1.hum1?arch=src&distro=hummingbird-20251124&repository_id=public-hummingbird-source-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json"}]},{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json","productId":"Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64","product":"vim-X11-0:9.2.967-1.1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:57614"},{"category":"workaround","details":"To mitigate this issue, users should avoid browsing untrusted directories or interacting with files from untrusted sources using Vim's netrw plugin. Exercise caution when opening directories that may contain maliciously crafted filenames."}],"purl":"pkg:rpm/redhat/vim-X11@9.2.967-1.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json"}]},{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json","productId":"Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64","product":"vim-X11-0:9.2.967-1.1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:57614"},{"category":"workaround","details":"To mitigate this issue, users should avoid browsing untrusted directories or interacting with files from untrusted sources using Vim's netrw plugin. Exercise caution when opening directories that may contain maliciously crafted filenames."}],"purl":"pkg:rpm/redhat/vim-X11@9.2.967-1.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json"}]},{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json","productId":"Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64","product":"vim-common-0:9.2.967-1.1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:57614"},{"category":"workaround","details":"To mitigate this issue, users should avoid browsing untrusted directories or interacting with files from untrusted sources using Vim's netrw plugin. Exercise caution when opening directories that may contain maliciously crafted filenames."}],"purl":"pkg:rpm/redhat/vim-common@9.2.967-1.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json"}]},{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json","productId":"Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms","product":"vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:57614"},{"category":"workaround","details":"To mitigate this issue, users should avoid browsing untrusted directories or interacting with files from untrusted sources using Vim's netrw plugin. Exercise caution when opening directories that may contain maliciously crafted filenames."}],"purl":"pkg:rpm/redhat/vim-data@9.2.967-1.1.hum1?arch=noarch&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json"}]},{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json","productId":"Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms","product":"vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:57614"},{"category":"workaround","details":"To mitigate this issue, users should avoid browsing untrusted directories or interacting with files from untrusted sources using Vim's netrw plugin. Exercise caution when opening directories that may contain maliciously crafted filenames."}],"purl":"pkg:rpm/redhat/vim-data@9.2.967-1.1.hum1?arch=noarch&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json"}]},{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json","productId":"Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms","product":"vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:57614"},{"category":"workaround","details":"To mitigate this issue, users should avoid browsing untrusted directories or interacting with files from untrusted sources using Vim's netrw plugin. Exercise caution when opening directories that may contain maliciously crafted filenames."}],"purl":"pkg:rpm/redhat/vim-default-editor@9.2.967-1.1.hum1?arch=noarch&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json"}]},{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json","productId":"Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms","product":"vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:57614"},{"category":"workaround","details":"To mitigate this issue, users should avoid browsing untrusted directories or interacting with files from untrusted sources using Vim's netrw plugin. Exercise caution when opening directories that may contain maliciously crafted filenames."}],"purl":"pkg:rpm/redhat/vim-default-editor@9.2.967-1.1.hum1?arch=noarch&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json"}]},{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json","productId":"Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64","product":"vim-enhanced-0:9.2.967-1.1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:57614"},{"category":"workaround","details":"To mitigate this issue, users should avoid browsing untrusted directories or interacting with files from untrusted sources using Vim's netrw plugin. Exercise caution when opening directories that may contain maliciously crafted filenames."}],"purl":"pkg:rpm/redhat/vim-enhanced@9.2.967-1.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json"}]},{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json","productId":"Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64","product":"vim-enhanced-0:9.2.967-1.1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:57614"},{"category":"workaround","details":"To mitigate this issue, users should avoid browsing untrusted directories or interacting with files from untrusted sources using Vim's netrw plugin. Exercise caution when opening directories that may contain maliciously crafted filenames."}],"purl":"pkg:rpm/redhat/vim-enhanced@9.2.967-1.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json"}]},{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json","productId":"Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms","product":"vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:57614"},{"category":"workaround","details":"To mitigate this issue, users should avoid browsing untrusted directories or interacting with files from untrusted sources using Vim's netrw plugin. Exercise caution when opening directories that may contain maliciously crafted filenames."}],"purl":"pkg:rpm/redhat/vim-filesystem@9.2.967-1.1.hum1?arch=noarch&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json"}]},{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json","productId":"Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64","product":"vim-minimal-0:9.2.967-1.1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:57614"},{"category":"workaround","details":"To mitigate this issue, users should avoid browsing untrusted directories or interacting with files from untrusted sources using Vim's netrw plugin. Exercise caution when opening directories that may contain maliciously crafted filenames."}],"purl":"pkg:rpm/redhat/vim-minimal@9.2.967-1.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json"}]},{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json","productId":"Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64","product":"vim-minimal-0:9.2.967-1.1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:57614"},{"category":"workaround","details":"To mitigate this issue, users should avoid browsing untrusted directories or interacting with files from untrusted sources using Vim's netrw plugin. Exercise caution when opening directories that may contain maliciously crafted filenames."}],"purl":"pkg:rpm/redhat/vim-minimal@9.2.967-1.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json"}]},{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json","productId":"Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64","product":"xxd-0:9.2.967-1.1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:57614"},{"category":"workaround","details":"To mitigate this issue, users should avoid browsing untrusted directories or interacting with files from untrusted sources using Vim's netrw plugin. Exercise caution when opening directories that may contain maliciously crafted filenames."}],"purl":"pkg:rpm/redhat/xxd@9.2.967-1.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json"}]},{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json","productId":"Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64","product":"xxd-0:9.2.967-1.1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:57614"},{"category":"workaround","details":"To mitigate this issue, users should avoid browsing untrusted directories or interacting with files from untrusted sources using Vim's netrw plugin. Exercise caution when opening directories that may contain maliciously crafted filenames."}],"purl":"pkg:rpm/redhat/xxd@9.2.967-1.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json"}]},{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json","productId":"red_hat_enterprise_linux_10:vim-X11","product":"vim-X11 as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, users should avoid browsing untrusted directories or interacting with files from untrusted sources using Vim's netrw plugin. Exercise caution when opening directories that may contain maliciously crafted filenames."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/vim-X11","origins":[{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json"}]},{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json","productId":"red_hat_enterprise_linux_10:vim-data","product":"vim-data as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, users should avoid browsing untrusted directories or interacting with files from untrusted sources using Vim's netrw plugin. Exercise caution when opening directories that may contain maliciously crafted filenames."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/vim-data","origins":[{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json"}]},{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json","productId":"red_hat_enterprise_linux_10:vim-filesystem","product":"vim-filesystem as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, users should avoid browsing untrusted directories or interacting with files from untrusted sources using Vim's netrw plugin. Exercise caution when opening directories that may contain maliciously crafted filenames."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/vim-filesystem","origins":[{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json"}]},{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json","productId":"red_hat_enterprise_linux_10:xxd","product":"xxd as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, users should avoid browsing untrusted directories or interacting with files from untrusted sources using Vim's netrw plugin. Exercise caution when opening directories that may contain maliciously crafted filenames."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/xxd","origins":[{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json"}]},{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json","productId":"red_hat_enterprise_linux_6:vim-common","product":"vim-common as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, users should avoid browsing untrusted directories or interacting with files from untrusted sources using Vim's netrw plugin. Exercise caution when opening directories that may contain maliciously crafted filenames."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/vim-common","origins":[{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json"}]},{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json","productId":"red_hat_enterprise_linux_6:vim-filesystem","product":"vim-filesystem as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, users should avoid browsing untrusted directories or interacting with files from untrusted sources using Vim's netrw plugin. Exercise caution when opening directories that may contain maliciously crafted filenames."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/vim-filesystem","origins":[{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json"}]},{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json","productId":"red_hat_enterprise_linux_6:vim.src","product":"vim.src as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, users should avoid browsing untrusted directories or interacting with files from untrusted sources using Vim's netrw plugin. Exercise caution when opening directories that may contain maliciously crafted filenames."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/vim?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json"}]},{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json","productId":"red_hat_enterprise_linux_7:vim-enhanced","product":"vim-enhanced as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, users should avoid browsing untrusted directories or interacting with files from untrusted sources using Vim's netrw plugin. Exercise caution when opening directories that may contain maliciously crafted filenames."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/vim-enhanced","origins":[{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json"}]},{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json","productId":"red_hat_enterprise_linux_7:vim-minimal","product":"vim-minimal as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, users should avoid browsing untrusted directories or interacting with files from untrusted sources using Vim's netrw plugin. Exercise caution when opening directories that may contain maliciously crafted filenames."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/vim-minimal","origins":[{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json"}]},{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json","productId":"red_hat_enterprise_linux_8:vim-X11","product":"vim-X11 as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, users should avoid browsing untrusted directories or interacting with files from untrusted sources using Vim's netrw plugin. Exercise caution when opening directories that may contain maliciously crafted filenames."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/vim-X11","origins":[{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json"}]},{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json","productId":"red_hat_enterprise_linux_8:vim-enhanced","product":"vim-enhanced as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, users should avoid browsing untrusted directories or interacting with files from untrusted sources using Vim's netrw plugin. Exercise caution when opening directories that may contain maliciously crafted filenames."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/vim-enhanced","origins":[{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json"}]},{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json","productId":"red_hat_enterprise_linux_8:vim-minimal","product":"vim-minimal as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, users should avoid browsing untrusted directories or interacting with files from untrusted sources using Vim's netrw plugin. Exercise caution when opening directories that may contain maliciously crafted filenames."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/vim-minimal","origins":[{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json"}]},{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json","productId":"red_hat_enterprise_linux_9:vim-common","product":"vim-common as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, users should avoid browsing untrusted directories or interacting with files from untrusted sources using Vim's netrw plugin. Exercise caution when opening directories that may contain maliciously crafted filenames."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/vim-common","origins":[{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json"}]},{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json","productId":"red_hat_enterprise_linux_9:vim-filesystem","product":"vim-filesystem as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, users should avoid browsing untrusted directories or interacting with files from untrusted sources using Vim's netrw plugin. Exercise caution when opening directories that may contain maliciously crafted filenames."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/vim-filesystem","origins":[{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json"}]},{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json","productId":"red_hat_enterprise_linux_9:vim.src","product":"vim.src as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, users should avoid browsing untrusted directories or interacting with files from untrusted sources using Vim's netrw plugin. Exercise caution when opening directories that may contain maliciously crafted filenames."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/vim?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json"}]},{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json","productId":"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-8","product":"openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/ose-rhel-coreos-8?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-8","origins":[{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json"}]},{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json","productId":"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-9","product":"openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/ose-rhel-coreos-9?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-9","origins":[{"source":"redhat","sourceId":"CVE-2026-43961","modified":"2026-10-16T17:42:51+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43961.json"}]}],"vendorCoverage":{"total":51,"shown":32,"omitted":19,"source":"redhat"}}