VULNERABILITY INTELLIGENCE

CVE-2026-51401

CVSS score7.7 HIGH

EPSS probability0.20%

CISA KEVNot currently listed

Published2026-08-04

Last modified2026-10-24

Description

An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vms_fixfilename() function within file vim/src/os_vms.c