A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs.

suse_linux SUSE-SU-2026:4594-1: SUSE SLED15 / SLES15 : Security update for emacs (Important) (SUSE-SU-2026:4594-1)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3195 advisory.

    A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes     specially crafted SVG (Scalable Vector Graphics) CSS (Cascading Style Sheets) data. A local user could     exploit this by convincing a victim to open a malicious SVG file, which may lead to a denial of service     (DoS) or potentially information disclosure. (CVE-2026-6861)

    A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using     language backends other than Lisp would execute arbitrary code from the edited file while performing     syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution     with the privileges of the user running Emacs. (CVE-2026-96442)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of emacs installed on the remote host is prior to 27.2-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3979 advisory.

    A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using     language backends other than Lisp would execute arbitrary code from the edited file while performing     syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution     with the privileges of the user running Emacs. (CVE-2026-96442)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES16 / SLES_SAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:23949-1 advisory.

    This update for emacs fixes the following issue:

    - CVE-2026-96442: arbitrary code execution when viewing or editing untrusted text files in modes other     than Emacs Lisp       mode (bsc#1282390).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21974-1 advisory.

    This update for emacs fixes the following issue:

    - CVE-2026-96442: arbitrary code execution when viewing or editing untrusted text files in modes other     than Emacs Lisp       mode (bsc#1282390).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using     language backends other than Lisp would execute arbitrary code from the edited file while performing     syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution     with the privileges of the user running Emacs. (CVE-2026-96442)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
365235	Amazon Linux 2023 : emacs, emacs-common, emacs-devel (ALAS2023-2026-3195)	Nessus	Amazon Linux Local Security Checks	Local	high
365223	Amazon Linux 2 : emacs (ALAS-2026-3979)	Nessus	Amazon Linux Local Security Checks	Local	high
362579	SUSE SLES16: emacs / emacs-el / emacs-eln / emacs-info / emacs-nox / emacs-x11 / etc (SUSE-SU-2026:23949-1)	Nessus	SuSE Local Security Checks	Local	high
362503	openSUSE 16: emacs / emacs-el / emacs-eln / emacs-games / emacs-info / emacs-nox / etc (openSUSE-SU-2026:21974-1)	Nessus	SuSE Local Security Checks	Local	high
349335	Linux Distros Unpatched Vulnerability : CVE-2026-96442	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-96442

high

Tenable Plugins

Coming Soon

high

high

high

high

high