https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-10T21:35:50.798685+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2024-5742 CVE-2024-5742 — Nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious… 2026-10-10T21:35:50.803938+00:00

Affected: nano, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7

A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions of the running user provides a window of opportunity for attackers to escalate privileges through a malicious symlink.

 https://vulnerability.circl.lu/vuln/usn-7064-1 USN-7064-1 — nano vulnerability 2026-10-10T21:35:50.804061+00:00

Affected: Ubuntu:Pro:16.04:LTS: nano, Ubuntu:Pro:18.04:LTS: nano, Ubuntu:20.04:LTS: nano, Ubuntu:22.04:LTS: nano, Ubuntu:24.04:LTS: nano

It was discovered that nano allowed a possible privilege escalation through an insecure temporary file. If nano was killed while editing, the permissions granted to the emergency save file could be used by an attacker to escalate privileges using a malicious symlink.