CVE-2026-96269
EUVD-2026-8486822.09.2026, 21:17
GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the default configuration; no particular user settings are required to trigger it.Enginsight
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources
(CNA/ADP records, vendor advisories, Enginsight analysis).
| Vendor | Product | Version | Source |
|---|---|---|---|
| gnu | emacs | 28.1 ≤ 𝑥 ≤ 31.1 | CNA |
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| emacs |
| ||||||||||||||
| xemacs21 |
| ||||||||||||||
| xemacs21-packages |
| ||||||||||||||
| emacs24 |
| ||||||||||||||
| emacs25 |
|
Common Weakness Enumeration
References