Beveiligingsadvies

CVE-2026-35177

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-06 17:54:42
Laatst bijgewerkt 2026-04-07 14:05:50
Toegewezen door GitHub_M
CVSS-score 4.1
Status PUBLISHED

Beschrijving

Vim is an open source, command line text editor. Prior to 9.2.0280, a path traversal bypass in Vim's zip.vim plugin allows overwriting of arbitrary files when opening specially crafted zip archives, circumventing the previous fix for CVE-2025-53906. This vulnerability is fixed in 9.2.0280.