The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3 / 17.5.1.3. It is, therefore, affected by a vulnerability as referenced in the K93144355 advisory.

    getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS     commands via the :source! command in a modeline, as demonstrated by execute in Vim, and assert_fails or     nvim_input in Neovim.(CVE-2019-12735)ImpactThis vulnerability allows a remote attacker to run arbitrary     commands.

Tenable has extracted the preceding description block directly from the F5 Networks BIG-IP security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1322 advisory.

    This advisory aggregates security fixes for the vim SRPM in CIQ LTS 8.6. It addresses 24 CVEs:
    CVE-2019-12735, CVE-2022-1927, CVE-2019-20807, CVE-2022-0413, CVE-2022-1621, and 19 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the vim package has been released.

This update for neovim fixes the following issues :

neovim was updated to version 0.3.7 :

  - CVE-2019-12735: source should check sandbox     (boo#1137443)

  - genappimage.sh: migrate to linuxdeploy

Version Update to version 0.3.5 :

  - options: properly reset directories on 'autochdir'

  - Remove MSVC optimization workaround for SHM_ALL

  - Make SHM_ALL to a variable instead of a compound literal     #define

  - doc: mention 'pynvim' module rename

  - screen: don't crash when drawing popupmenu with     'rightleft' option

  - look-behind match may use the wrong line number

  - :terminal : set topline based on window height

  - :recover : Fix crash on non-existent *.swp

Version Update to version 0.3.4 :

  - test: add tests for conceal cursor movement

  - display: unify ursorline and concealcursor redraw logic

Version Update to version 0.3.3 :

  - health/provider: Check for available pynvim when neovim     mod is missing

  - python#CheckForModule: Use the given module string     instead of hard-coding pynvim

  - (health.provider)/python: Import the neovim, rather than     pynvim, module

  - TUI: Konsole DECSCUSR fixup

Version Update to version 0.3.2:- 

  - Features

  - clipboard: support Custom VimL functions (#9304)

  - win/TUI: improve terminal/console support (#9401)

  - startup: Use $XDG_CONFIG_DIRS/nvim/sysinit.vim if exists     (#9077)

  - support mapping in more places (#9299)

  - diff/highlight: show underline for low-priority     CursorLine (#9028)

  - signs: Add 'nuhml' argument (#9113)

  - clipboard: support Wayland (#9230)

  - TUI: add support for undercurl and underline color     (#9052)

  - man.vim: soft (dynamic) wrap (#9023)

  - API

  - API: implement object namespaces (#6920)

  - API: implement nvim_win_set_buf() (#9100)

  - API: virtual text annotations     (nvim_buf_set_virtual_text) (#8180)

  - API: add nvim_buf_is_loaded() (#8660)

  - API: nvm_buf_get_offset_for_line (#8221)

  - API/UI: ext_newgrid, ext_histate (#8221)

  - UI

  - TUI: use BCE again more often (smoother resize) (#8806)

  - screen: add missing status redraw when     redraw_later(CLEAR) was used (#9315)

  - TUI: clip invalid regions on resize (#8779)

  - TUI: improvements for scrolling and clearing (#9193)

  - TUI: disable clearing almost everywhere (#9143)

  - TUI: always use safe cursor movement after resize     (#9079)

  - ui_options: also send when starting or from OptionSet     (#9211)

  - TUI: Avoid reset_color_cursor_color in old VTE (#9191)

  - Don't erase screen on :hi Normal during startup (#9021)

  - TUI: Hint wrapped lines to terminals (#8915) 

  - FIXES

  - RPC: turn errors from async calls into notifications

  - TUI: Restore terminal title via 'title stacking' (#9407)

  - genappimage: Unset $ARGV0 at invocation (#9376)

  - TUI: Konsole 18.07.70 supports DECSCUSR (#9364)

  - provider: improve error message (#9344) 

  - runtime/syntax: Fix highlighting of autogroup contents     (#9328)

  - VimL/confirm(): Show dialog even if :silent (#9297)

  - clipboard: prefer xclip (#9302)

  - provider/nodejs: fix npm, yarn detection

  - channel: avoid buffering output when only terminal is     active (#9218)

  - ruby: detect rbenv shims for other versions (#8733)

  - third-party/unibilium: Fix parsing of extended     capabilitiy entries (#9123)

  - jobstart(): Fix hang on non-executable cwd (#9204)

  - provide/nodejs: Simultaneously query npm and yarn     (#9054)

  - undo: Fix infinite loop if undo_read_byte returns EOF     (#2880) 

  - 'swapfile: always show dialog' (#9034) 

  - Add to the system-wide configuration file extension of     runtimepath by /usr/share/vim/site, so that neovim uses     other Vim plugins installed from packages.

  - Add /usr/share/vim/site tree of directories to be owned     by neovim as well.

It was found that the `:source!` command was not restricted by the sandbox mode. If modeline was explicitly enabled, opening a specially crafted text file in vim could result in arbitrary command execution.
(CVE-2019-12735)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has vim packages installed that are affected by a vulnerability:

  - It was found that the `:source!` command was not     restricted by the sandbox mode. If modeline was     explicitly enabled, opening a specially crafted text     file in vim could result in arbitrary command execution.
    (CVE-2019-12735)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has vim packages installed that are affected by a vulnerability:

  - It was found that the `:source!` command was not     restricted by the sandbox mode. If modeline was     explicitly enabled, opening a specially crafted text     file in vim could result in arbitrary command execution.
    (CVE-2019-12735)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It was discovered that Neovim incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code.
(CVE-2019-12735).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

1717503 - Security issue: patch 8.1.1365: source command doesn't check for the sandbox

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version MAIN 6.06, has vim packages installed that are affected by a vulnerability:

  - getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS     commands via the :source! command in a modeline, as demonstrated by execute in Vim, and assert_fails or     nvim_input in Neovim. (CVE-2019-12735)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
176362	F5 Networks BIG-IP : Vim/Neovim vulnerability (K93144355)	Nessus	F5 Networks Local Security Checks	5/25/2023	10/21/2026	high
357171	Rocky Linux 8.6 [CIQ] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (ciqsa-2026_1322)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/12/2026	critical
126203	Photon OS 1.0: Vim PHSA-2019-1.0-0237	Nessus	PhotonOS Local Security Checks	6/25/2019	6/26/2019	high
126899	openSUSE Security Update : neovim (openSUSE-2019-1759)	Nessus	SuSE Local Security Checks	7/22/2019	5/9/2024	high
127067	Amazon Linux AMI : vim (ALAS-2019-1239)	Nessus	Amazon Linux Local Security Checks	7/26/2019	5/8/2024	high
127443	NewStart CGSL CORE 5.04 / MAIN 5.04 : vim Vulnerability (NS-SA-2019-0161)	Nessus	NewStart CGSL Local Security Checks	8/12/2019	1/14/2021	high
127449	NewStart CGSL CORE 5.05 / MAIN 5.05 : vim Vulnerability (NS-SA-2019-0164)	Nessus	NewStart CGSL Local Security Checks	8/12/2019	1/14/2021	high
125854	Ubuntu 18.10 / 19.04 : Neovim vulnerability (USN-4016-2)	Nessus	Ubuntu Local Security Checks	6/12/2019	5/16/2024	high
125868	Fedora 29 : 2:vim (2019-dcd49378b8)	Nessus	Fedora Local Security Checks	6/13/2019	5/16/2024	high
266237	NewStart CGSL MAIN 6.06 : vim Vulnerability (NS-SA-2025-0217)	Nessus	NewStart CGSL Local Security Checks	9/30/2025	9/30/2025	high

Detections

Analytics

Plugins Search

high

critical

high

high

high

high

high

high

high

high