A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitrary code execution.

suse_linux SUSE-SU-2026:4083-1: SUSE SLED15 / SLES15 : Security update for emacs (Important) (SUSE-SU-2026:4083-1)

suse_linux SUSE-SU-2026:3993-1: SUSE SLES12 : Security update for emacs (Important) (SUSE-SU-2026:3993-1)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2147 advisory.

    GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an     attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated     max color index. The image loader multiplies image dimensions and channel count using signed integer     arithmetic; for sufficiently large values, the result wraps to a negative number, bypassing the bounds     check and causing the pixel reader to access heap memory past the end of the allocated buffer. The over-     read contents are interpreted as pixel color values and rendered on screen. (CVE-2026-77219)

    A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing     maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper     sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitrary code     execution. (CVE-2026-79992)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6b1a89dfe6 advisory.

    Fix CVE-2026-79992: Local shell command injection through the user field in emacs tramp

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21711-1 advisory.

    Security issues fixed:

    - Arbitrary code execution when opening a specially crafted file (bsc#1275941).
    - CVE-2026-77219: integer overflow in the PBM/PPM/PGM image loader leads to heap memory content leaks when     a crafted       image with large dimensions and an elevated max color index is processed (bsc#1276264).
    - CVE-2026-79992: improper argument sanitization in TRAMP leads to arbitrary code execution via crafted     filenames       (bsc#1275927).

    Other updates and bugfixes:

    - Fix memory leak in wayland port (bsc#1271643).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e47f5a0b84 advisory.

    Fix CVE-2026-79992: Local shell command injection through the user field in emacs tramp


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing     maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper     sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitrary code     execution. (CVE-2026-79992)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote host is affected by the vulnerability described in GLSA-202608-21 (GNU Emacs: Arbitrary code execution)

    A vulnerability has been discovered in GNU Emacs. Please review the CVE identifier referenced below for     details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
345770	Amazon Linux 2023 : emacs, emacs-common, emacs-devel (ALAS2023-2026-2147)	Nessus	Amazon Linux Local Security Checks	Local	medium
343788	Fedora 43 : emacs (2026-6b1a89dfe6)	Nessus	Fedora Local Security Checks	Local	high
342572	openSUSE 16: emacs / emacs-el / emacs-eln / emacs-games / emacs-info / emacs-nox / etc (openSUSE-SU-2026:21711-1)	Nessus	SuSE Local Security Checks	Local	medium
342416	Fedora 44 : emacs (2026-e47f5a0b84)	Nessus	Fedora Local Security Checks	Local	high
339522	Linux Distros Unpatched Vulnerability : CVE-2026-79992	Nessus	Misc.	Local	high
339063	GLSA-202608-21 : GNU Emacs: Arbitrary code execution	Nessus	Gentoo Local Security Checks	Local	high

Detections

Analytics

CVE-2026-79992

high

Tenable Plugins

Coming Soon

medium

high

medium

high

high

high