The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1095-1 advisory.

    Update Vim to version 9.2.0110:

    - CVE-2025-53906: Fixed that malicious zip archive may cause a path traversal in Vim's zip (bsc#1246602).
    - CVE-2026-26269: Fixed Netbeans specialKeys stack buffer overflow (bsc#1258229).
    - CVE-2026-28417: Fixed crafted URL parsed by netrw plugin can lead to execute arbitrary shell commands     (bsc#1259051).
    - CVE-2026-28418: Fixed that a malformed tags file can cause an heap-based buffer overflow out-of-bounds     read (bsc#1259052)
    - CVE-2026-28419: Fixed processing a malformed tags file containing a delimiter can lead to a crash     (bsc#1259053)
    - CVE-2026-28420: Fixed that processing maximum combining characters in terminal emulator can lead to     heap-based buffer overflow write (bsc#1259054)
    - CVE-2026-28421: Fixed that a crafted swap file can cause a heap-buffer-overflow and a segmentation fault
    - CVE-2026-28422: Fixed that a malicious modeline or plugin can trigger a stack-buffer-overflow     (bsc#1259056)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

SUSE SLES15 Security Update : vim (SUSE-SU-2026:1095-1)

high Nessus Plugin ID 304130

Version 1.2