GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the default configuration; no particular user settings are required to trigger it.

redhat RHSA-2026:98574: RHSA-2026:98574: emacs security update (Important)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2026_90887 advisory.

    * emacs: GNU Emacs: Arbitrary code execution upon opening a file (CVE-2026-96269)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:90887 advisory.

    * emacs: GNU Emacs: Arbitrary code execution upon opening a file (CVE-2026-96269)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:90887 advisory.

    GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing     features, a scripting language (elisp), and the capability to read e-mail and news.

    Security Fix(es):

    * emacs: GNU Emacs: Arbitrary code execution upon opening a file (CVE-2026-96269)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:90887 advisory.

    * emacs: GNU Emacs: Arbitrary code execution upon opening a file (CVE-2026-96269)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-90887 advisory.

    - Fix arbitrary code execution upon opening file (CVE-2026-96269)
    - Generalize trusted-content-p check to all Flymake backends       (CVE-2026-96442)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted     value of read-symbol-shorthands affects the intern and unintern functions. This affects the default     configuration; no particular user settings are required to trigger it. (CVE-2026-96269)

Note that Nessus relies on the presence of the package as reported by the vendor.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2147 advisory.

    GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an     attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated     max color index. The image loader multiplies image dimensions and channel count using signed integer     arithmetic; for sufficiently large values, the result wraps to a negative number, bypassing the bounds     check and causing the pixel reader to access heap memory past the end of the allocated buffer. The over-     read contents are interpreted as pixel color values and rendered on screen. (CVE-2026-77219)

    A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing     maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper     sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitrary code     execution. (CVE-2026-79992)

    GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted     value of read-symbol-shorthands affects the intern and unintern functions. This affects the default     configuration; no particular user settings are required to trigger it. (CVE-2026-96269)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
374080	Rocky Linux 10.2 [CIQ] Security Update: emacs / emacs-common / emacs-common-debuginfo / emacs-debuginfo / etc (crlsa-2026_90887)	Nessus	Rocky Linux Local Security Checks	Local	high
373660	RockyLinux 10 : emacs (RLSA-2026:90887)	Nessus	Rocky Linux Local Security Checks	Local	high
373538	RHEL 10 : emacs (RHSA-2026:90887)	Nessus	Red Hat Local Security Checks	Local	high
373222	AlmaLinux 10 : emacs (ALSA-2026:90887)	Nessus	Alma Linux Local Security Checks	Local	high
372642	Oracle Linux 10 : emacs (ELSA-2026-90887)	Nessus	Oracle Linux Local Security Checks	Local	high
349336	Linux Distros Unpatched Vulnerability : CVE-2026-96269	Nessus	Misc.	Local	high
345770	Amazon Linux 2023 : emacs, emacs-common, emacs-devel (ALAS2023-2026-2147)	Nessus	Amazon Linux Local Security Checks	Local	high

Detections

Analytics

CVE-2026-96269

high

Tenable Plugins

Coming Soon

high

high

high

high

high

high

high