Vulnerability-Lookup

CVE-2026-6842 (GCVE-0-2026-6842)

Vulnerability from cvelistv5 – Published: 2026-04-22 07:34 – Updated: 2026-09-01 12:07

Title

Nano: nano: local attacker can inject malicious .desktop launcher due to insecure directory permissions

Summary

A flaw was found in nano. In environments with permissive umask settings, a local attacker can exploit incorrect directory permissions (0777 instead of 0700) for the `~/.local` directory. This allows the attacker to inject a malicious `.desktop` launcher, which could lead to unintended actions or information disclosure if the launcher is subsequently processed.

Severity

2.5 (Low)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-04-22 13:07 UTC

CWE

CWE-732 - Incorrect Permission Assignment for Critical Resource

Assigner

redhat redhat root

References

2 references

URL	Tags
https://access.redhat.com/security/cve/CVE-2026-6842	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2460018	issue-trackingx_refsource_REDHAT

Impacted products

7 products

Vendor	Product	Version
		Affected: 2.9.1 , < 9.0 (semver)
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4

Date Public

2026-04-13 00:00

Credits

Red Hat would like to thank Michał Majchrowicz, Marcin Wyczechowski (AFINE Team) for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-6842",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-22T13:07:50.621296Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-22T13:07:57.497Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://git.savannah.gnu.org/git/nano.git",
          "defaultStatus": "unaffected",
          "packageName": "nano",
          "versions": [
            {
              "lessThan": "9.0",
              "status": "affected",
              "version": "2.9.1",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "affected",
          "packageName": "nano",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "affected",
          "packageName": "nano",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "affected",
          "packageName": "nano",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "affected",
          "packageName": "nano",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "affected",
          "packageName": "nano",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift/ose-rhel-coreos-8",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift/ose-rhel-coreos-9",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Red Hat would like to thank Micha\u0142 Majchrowicz, Marcin Wyczechowski (AFINE Team) for reporting this issue."
        }
      ],
      "datePublic": "2026-04-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in nano. In environments with permissive umask settings, a local attacker can exploit incorrect directory permissions (0777 instead of 0700) for the `~/.local` directory. This allows the attacker to inject a malicious `.desktop` launcher, which could lead to unintended actions or information disclosure if the launcher is subsequently processed."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Low"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 2.5,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-732",
              "description": "Incorrect Permission Assignment for Critical Resource",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-01T12:07:35.563Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-6842"
        },
        {
          "name": "RHBZ#2460018",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460018"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-04-13T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-04-13T00:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Nano: nano: local attacker can inject malicious .desktop launcher due to insecure directory permissions",
      "workarounds": [
        {
          "lang": "en",
          "value": "Ensure that the system\u0027s umask is configured to a secure value, such as `0022` or `0077`, to prevent the creation of world-writable directories. This can be set system-wide in `/etc/profile` or `/etc/bashrc`, or for individual users in their `~/.bashrc` or `~/.profile`. A secure umask will ensure that newly created directories, including `~/.local` by `nano`, have appropriate permissions."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-732: Incorrect Permission Assignment for Critical Resource"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-6842",
    "datePublished": "2026-04-22T07:34:26.360Z",
    "dateReserved": "2026-04-22T07:20:17.989Z",
    "dateUpdated": "2026-09-01T12:07:35.563Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-6842",
      "date": "2026-09-16",
      "epss": "0.00085",
      "percentile": "0.00359"
    },
    "microsoft_vex": {
      "current_release_date": "2026-06-03T01:44:56.000Z",
      "cve": "CVE-2026-6842",
      "id": "msrc_CVE-2026-6842",
      "initial_release_date": "2026-04-02T00:00:00.000Z",
      "product_status:fixed": "2",
      "product_status:known_affected": "3",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "Nano: nano: local attacker can inject malicious .desktop launcher due to insecure directory permissions",
      "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-6842.json",
      "version": "4"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-6842\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2026-04-22T08:16:13.170\",\"lastModified\":\"2026-09-01T13:19:56.757\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A flaw was found in nano. In environments with permissive umask settings, a local attacker can exploit incorrect directory permissions (0777 instead of 0700) for the `~/.local` directory. This allows the attacker to inject a malicious `.desktop` launcher, which could lead to unintended actions or information disclosure if the launcher is subsequently processed.\"}],\"affected\":[{\"source\":\"secalert@redhat.com\",\"affectedData\":[{\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://git.savannah.gnu.org/git/nano.git\",\"packageName\":\"nano\",\"versions\":[{\"version\":\"2.9.1\",\"lessThan\":\"9.0\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nano\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nano\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nano\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nano\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nano\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift/ose-rhel-coreos-8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift/ose-rhel-coreos-9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N\",\"baseScore\":2.5,\"baseSeverity\":\"LOW\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":1.0,\"impactScore\":1.4}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-04-22T13:07:50.621296Z\",\"id\":\"CVE-2026-6842\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-732\"}]}],\"references\":[{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-6842\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2460018\",\"source\":\"secalert@redhat.com\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-09-01T12:07:29+00:00",
      "cve": "CVE-2026-6842",
      "id": "CVE-2026-6842",
      "initial_release_date": "2026-04-13T00:00:00+00:00",
      "product_status:known_affected": "9",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "nano: nano: Local attacker can inject malicious .desktop launcher due to insecure directory permissions",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6842.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "low",
      "current_release_date": "2026-04-28T01:45:09Z",
      "cve": "CVE-2026-6842",
      "id": "CVE-2026-6842",
      "initial_release_date": "2026-04-28T01:45:09Z",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-6842",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-6842.json",
      "version": "2"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-6842\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-04-22T13:07:50.621296Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-04-22T13:07:54.134Z\"}}], \"cna\": {\"title\": \"Nano: nano: local attacker can inject malicious .desktop launcher due to insecure directory permissions\", \"credits\": [{\"lang\": \"en\", \"value\": \"Red Hat would like to thank Micha\\u0142 Majchrowicz, Marcin Wyczechowski (AFINE Team) for reporting this issue.\"}], \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Low\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 2.5, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"LOW\", \"vectorString\": \"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N\", \"integrityImpact\": \"LOW\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"versions\": [{\"status\": \"affected\", \"version\": \"2.9.1\", \"lessThan\": \"9.0\", \"versionType\": \"semver\"}], \"packageName\": \"nano\", \"collectionURL\": \"https://git.savannah.gnu.org/git/nano.git\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"nano\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 6\", \"packageName\": \"nano\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"nano\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"nano\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"nano\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift/ose-rhel-coreos-8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift/ose-rhel-coreos-9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-04-13T00:00:00.000Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-04-13T00:00:00.000Z\", \"value\": \"Made public.\"}], \"datePublic\": \"2026-04-13T00:00:00.000Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-6842\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2460018\", \"name\": \"RHBZ#2460018\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Ensure that the system\u0027s umask is configured to a secure value, such as `0022` or `0077`, to prevent the creation of world-writable directories. This can be set system-wide in `/etc/profile` or `/etc/bashrc`, or for individual users in their `~/.bashrc` or `~/.profile`. A secure umask will ensure that newly created directories, including `~/.local` by `nano`, have appropriate permissions.\"}], \"x_generator\": {\"engine\": \"cvelib 1.8.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in nano. In environments with permissive umask settings, a local attacker can exploit incorrect directory permissions (0777 instead of 0700) for the `~/.local` directory. This allows the attacker to inject a malicious `.desktop` launcher, which could lead to unintended actions or information disclosure if the launcher is subsequently processed.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-732\", \"description\": \"Incorrect Permission Assignment for Critical Resource\"}]}], \"providerMetadata\": {\"orgId\": \"53f830b8-0a3f-465b-8143-3b8a9948e749\", \"shortName\": \"redhat\", \"dateUpdated\": \"2026-09-01T12:07:35.563Z\"}, \"x_redhatCweChain\": \"CWE-732: Incorrect Permission Assignment for Critical Resource\"}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-6842\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-09-01T12:07:35.563Z\", \"dateReserved\": \"2026-04-22T07:20:17.989Z\", \"assignerOrgId\": \"53f830b8-0a3f-465b-8143-3b8a9948e749\", \"datePublished\": \"2026-04-22T07:34:26.360Z\", \"assignerShortName\": \"redhat\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

CERTFR-2026-AVI-0558

Vulnerability from certfr_avis - Published: 2026-05-11 - Updated: 2026-05-11

De multiples vulnérabilités ont été découvertes dans Microsoft Azure Linux. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Microsoft	Azure Linux	azl3 kernel 6.6.137.1-2 versions antérieures à 6.6.138.1-1
Microsoft	Azure Linux	azl3 kf-kcoreaddons 5.249.0-1 versions antérieures à 5.249.0-2
Microsoft	Azure Linux	azl3 firewalld 2.0.2-3 versions antérieures à 2.0.2-4
Microsoft	Azure Linux	azl3 python-pip 24.2-6 versions antérieures à 24.2-7
Microsoft	Azure Linux	azl3 nano 6.4-2 versions antérieures à 6.4-3
Microsoft	Azure Linux	azl3 frr 10.5.0-3 versions antérieures à 10.5.4-1

References

Title

Publication Time

Tags

Bulletin de sécurité Microsoft CVE-2026-43400	2026-05-09	vendor-advisory
Bulletin de sécurité Microsoft CVE-2026-4948	2026-05-02	vendor-advisory
Bulletin de sécurité Microsoft CVE-2025-71293	2026-05-07	vendor-advisory
Bulletin de sécurité Microsoft CVE-2026-43284	2026-05-09	vendor-advisory
Bulletin de sécurité Microsoft CVE-2026-43300	2026-05-09	vendor-advisory
Bulletin de sécurité Microsoft CVE-2026-37457	2026-05-05	vendor-advisory
Bulletin de sécurité Microsoft CVE-2025-71290	2026-05-07	vendor-advisory
Bulletin de sécurité Microsoft CVE-2026-43243	2026-05-07	vendor-advisory
Bulletin de sécurité Microsoft CVE-2025-71294	2026-05-07	vendor-advisory
Bulletin de sécurité Microsoft CVE-2026-6843	2026-05-03	vendor-advisory
Bulletin de sécurité Microsoft CVE-2026-43165	2026-05-07	vendor-advisory
Bulletin de sécurité Microsoft CVE-2026-43237	2026-05-07	vendor-advisory
Bulletin de sécurité Microsoft CVE-2026-43201	2026-05-07	vendor-advisory
Bulletin de sécurité Microsoft CVE-2026-43306	2026-05-09	vendor-advisory
Bulletin de sécurité Microsoft CVE-2026-43321	2026-05-09	vendor-advisory
Bulletin de sécurité Microsoft CVE-2025-71299	2026-05-09	vendor-advisory
Bulletin de sécurité Microsoft CVE-2026-43267	2026-05-07	vendor-advisory
Bulletin de sécurité Microsoft CVE-2026-43274	2026-05-07	vendor-advisory
Bulletin de sécurité Microsoft CVE-2026-43320	2026-05-09	vendor-advisory
Bulletin de sécurité Microsoft CVE-2026-3219	2026-04-23	vendor-advisory
Bulletin de sécurité Microsoft CVE-2026-43195	2026-05-07	vendor-advisory
Bulletin de sécurité Microsoft CVE-2026-43228	2026-05-07	vendor-advisory
Bulletin de sécurité Microsoft CVE-2026-43191	2026-05-07	vendor-advisory
Bulletin de sécurité Microsoft CVE-2026-41526	2026-05-01	vendor-advisory
Bulletin de sécurité Microsoft CVE-2026-43292	2026-05-09	vendor-advisory
Bulletin de sécurité Microsoft CVE-2026-43305	2026-05-09	vendor-advisory
Bulletin de sécurité Microsoft CVE-2026-43398	2026-05-09	vendor-advisory
Bulletin de sécurité Microsoft CVE-2026-43474	2026-05-09	vendor-advisory
Bulletin de sécurité Microsoft CVE-2026-6842	2026-05-03	vendor-advisory
Bulletin de sécurité Microsoft CVE-2026-43176	2026-05-07	vendor-advisory
Bulletin de sécurité Microsoft CVE-2025-71302	2026-05-09	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "azl3 kernel 6.6.137.1-2 versions ant\u00e9rieures \u00e0 6.6.138.1-1",
      "product": {
        "name": "Azure Linux",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "azl3 kf-kcoreaddons 5.249.0-1 versions ant\u00e9rieures \u00e0 5.249.0-2",
      "product": {
        "name": "Azure Linux",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "azl3 firewalld 2.0.2-3 versions ant\u00e9rieures \u00e0 2.0.2-4",
      "product": {
        "name": "Azure Linux",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "azl3 python-pip 24.2-6 versions ant\u00e9rieures \u00e0 24.2-7",
      "product": {
        "name": "Azure Linux",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "azl3 nano 6.4-2 versions ant\u00e9rieures \u00e0 6.4-3",
      "product": {
        "name": "Azure Linux",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "azl3 frr 10.5.0-3 versions ant\u00e9rieures \u00e0 10.5.4-1",
      "product": {
        "name": "Azure Linux",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-43305",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43305"
    },
    {
      "name": "CVE-2026-43292",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43292"
    },
    {
      "name": "CVE-2026-43274",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43274"
    },
    {
      "name": "CVE-2025-71290",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71290"
    },
    {
      "name": "CVE-2026-43306",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43306"
    },
    {
      "name": "CVE-2026-43284",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43284"
    },
    {
      "name": "CVE-2026-43201",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43201"
    },
    {
      "name": "CVE-2026-6843",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6843"
    },
    {
      "name": "CVE-2026-43243",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43243"
    },
    {
      "name": "CVE-2025-71294",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71294"
    },
    {
      "name": "CVE-2026-3219",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3219"
    },
    {
      "name": "CVE-2026-6842",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6842"
    },
    {
      "name": "CVE-2026-41526",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41526"
    },
    {
      "name": "CVE-2026-43400",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43400"
    },
    {
      "name": "CVE-2026-43398",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43398"
    },
    {
      "name": "CVE-2026-43228",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43228"
    },
    {
      "name": "CVE-2026-4948",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4948"
    },
    {
      "name": "CVE-2026-43300",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43300"
    },
    {
      "name": "CVE-2026-43191",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43191"
    },
    {
      "name": "CVE-2026-43176",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43176"
    },
    {
      "name": "CVE-2026-43237",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43237"
    },
    {
      "name": "CVE-2026-43474",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43474"
    },
    {
      "name": "CVE-2026-43195",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43195"
    },
    {
      "name": "CVE-2025-71302",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71302"
    },
    {
      "name": "CVE-2025-71293",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71293"
    },
    {
      "name": "CVE-2026-43267",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43267"
    },
    {
      "name": "CVE-2026-43165",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43165"
    },
    {
      "name": "CVE-2026-43321",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43321"
    },
    {
      "name": "CVE-2026-43320",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43320"
    },
    {
      "name": "CVE-2025-71299",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71299"
    },
    {
      "name": "CVE-2026-37457",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-37457"
    }
  ],
  "initial_release_date": "2026-05-11T00:00:00",
  "last_revision_date": "2026-05-11T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0558",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-05-11T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft Azure Linux. Elles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Azure Linux",
  "vendor_advisories": [
    {
      "published_at": "2026-05-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-43400",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43400"
    },
    {
      "published_at": "2026-05-02",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-4948",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4948"
    },
    {
      "published_at": "2026-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-71293",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71293"
    },
    {
      "published_at": "2026-05-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-43284",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43284"
    },
    {
      "published_at": "2026-05-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-43300",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43300"
    },
    {
      "published_at": "2026-05-05",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-37457",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-37457"
    },
    {
      "published_at": "2026-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-71290",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71290"
    },
    {
      "published_at": "2026-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-43243",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43243"
    },
    {
      "published_at": "2026-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-71294",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71294"
    },
    {
      "published_at": "2026-05-03",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-6843",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6843"
    },
    {
      "published_at": "2026-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-43165",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43165"
    },
    {
      "published_at": "2026-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-43237",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43237"
    },
    {
      "published_at": "2026-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-43201",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43201"
    },
    {
      "published_at": "2026-05-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-43306",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43306"
    },
    {
      "published_at": "2026-05-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-43321",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43321"
    },
    {
      "published_at": "2026-05-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-71299",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71299"
    },
    {
      "published_at": "2026-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-43267",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43267"
    },
    {
      "published_at": "2026-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-43274",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43274"
    },
    {
      "published_at": "2026-05-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-43320",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43320"
    },
    {
      "published_at": "2026-04-23",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-3219",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3219"
    },
    {
      "published_at": "2026-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-43195",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43195"
    },
    {
      "published_at": "2026-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-43228",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43228"
    },
    {
      "published_at": "2026-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-43191",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43191"
    },
    {
      "published_at": "2026-05-01",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-41526",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41526"
    },
    {
      "published_at": "2026-05-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-43292",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43292"
    },
    {
      "published_at": "2026-05-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-43305",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43305"
    },
    {
      "published_at": "2026-05-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-43398",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43398"
    },
    {
      "published_at": "2026-05-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-43474",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43474"
    },
    {
      "published_at": "2026-05-03",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-6842",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6842"
    },
    {
      "published_at": "2026-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-43176",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43176"
    },
    {
      "published_at": "2026-05-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2025-71302",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71302"
    }
  ]
}

FKIE_CVE-2026-6842

Vulnerability from fkie_nvd - Published: 2026-04-22 08:16 - Updated: 2026-09-01 13:19

Severity

2.5 (Low) - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Summary

References

	URL	Tags
	secalert@redhat.com	https://access.redhat.com/security/cve/CVE-2026-6842
	secalert@redhat.com	https://bugzilla.redhat.com/show_bug.cgi?id=2460018

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "collectionURL": "https://git.savannah.gnu.org/git/nano.git",
          "defaultStatus": "unaffected",
          "packageName": "nano",
          "versions": [
            {
              "lessThan": "9.0",
              "status": "affected",
              "version": "2.9.1",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "affected",
          "packageName": "nano",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "affected",
          "packageName": "nano",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "affected",
          "packageName": "nano",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "affected",
          "packageName": "nano",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "affected",
          "packageName": "nano",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift/ose-rhel-coreos-8",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift/ose-rhel-coreos-9",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        }
      ],
      "source": "secalert@redhat.com"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A flaw was found in nano. In environments with permissive umask settings, a local attacker can exploit incorrect directory permissions (0777 instead of 0700) for the `~/.local` directory. This allows the attacker to inject a malicious `.desktop` launcher, which could lead to unintended actions or information disclosure if the launcher is subsequently processed."
    }
  ],
  "id": "CVE-2026-6842",
  "lastModified": "2026-09-01T13:19:56.757",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "LOCAL",
          "availabilityImpact": "NONE",
          "baseScore": 2.5,
          "baseSeverity": "LOW",
          "confidentialityImpact": "NONE",
          "integrityImpact": "LOW",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 1.0,
        "impactScore": 1.4,
        "source": "secalert@redhat.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-6842",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-04-22T13:07:50.621296Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-04-22T08:16:13.170",
  "references": [
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/security/cve/CVE-2026-6842"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460018"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-732"
        }
      ],
      "source": "secalert@redhat.com",
      "type": "Secondary"
    }
  ]
}

GHSA-CCFR-97MR-QQ8G

Vulnerability from github – Published: 2026-04-22 09:31 – Updated: 2026-04-22 09:31

Details

A flaw was found in nano. In environments with permissive umask settings, a local attacker can exploit incorrect directory permissions (0777 instead of 0700) for the ~/.local directory. This allows the attacker to inject a malicious .desktop launcher, which could lead to unintended actions or information disclosure if the launcher is subsequently processed.

Severity

2.5 (Low)


                  
                    CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-6842"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-732"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-04-22T08:16:13Z",
    "severity": "LOW"
  },
  "details": "A flaw was found in nano. In environments with permissive umask settings, a local attacker can exploit incorrect directory permissions (0777 instead of 0700) for the `~/.local` directory. This allows the attacker to inject a malicious `.desktop` launcher, which could lead to unintended actions or information disclosure if the launcher is subsequently processed.",
  "id": "GHSA-ccfr-97mr-qq8g",
  "modified": "2026-04-22T09:31:31Z",
  "published": "2026-04-22T09:31:31Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6842"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/security/cve/CVE-2026-6842"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460018"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
      "type": "CVSS_V3"
    }
  ]
}

MSRC_CVE-2026-6842

Vulnerability from csaf_microsoft - Published: 2026-04-02 00:00 - Updated: 2026-06-03 01:44

Summary

Nano: nano: local attacker can inject malicious .desktop launcher due to insecure directory permissions

Scope

1 vulnerability in this advisory, including CVE-2026-6842.

CVE-2026-6842

2.5 (Low)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Fixed: 2 products Known affected: 3 products

https://learn.microsoft.com/en-us/azure/azure-linux/tutoria…

Open the full advisory

OPENSUSE-SU-2026:10851-1

Vulnerability from csaf_opensuse - Published: 2026-05-24 00:00 - Updated: 2026-05-24 00:00

Summary

nano-9.0-2.1 on GA media

Severity

Moderate

Scope

2 vulnerabilities in this advisory, including CVE-2026-6842.

CVE-2026-6842

Recommended: 8 products

Open the full advisory

ubuntu-cve-2026-6842

Vulnerability from osv_ubuntu

Published

2026-04-22 08:16

Modified

2026-06-05 01:03

Summary

Details

Severity

2.5 (Low)


                    
                      CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2026-6842	REPORT
	https://www.cve.org/CVERecord?id=CVE-2026-6842	REPORT
	https://bugzilla.redhat.com/show_bug.cgi?id=2460018	REPORT
	https://bugzilla.redhat.com/show_bug.cgi?id=2455314	REPORT
	https://ubuntu.com/security/notices/USN-8386-1	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "nano",
            "binary_version": "2.9.3-2ubuntu0.1~esm2"
          },
          {
            "binary_name": "nano-tiny",
            "binary_version": "2.9.3-2ubuntu0.1~esm2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:18.04:LTS",
        "name": "nano",
        "purl": "pkg:deb/ubuntu/nano@2.9.3-2ubuntu0.1~esm2?arch=source\u0026distro=esm-infra/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.9.3-2ubuntu0.1~esm2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.8.6-3",
        "2.8.7-1",
        "2.9.0-1",
        "2.9.1-1",
        "2.9.2-1",
        "2.9.3-1",
        "2.9.3-2",
        "2.9.3-2ubuntu0.1~esm1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "nano",
            "binary_version": "4.8-1ubuntu1.1+esm1"
          },
          {
            "binary_name": "nano-tiny",
            "binary_version": "4.8-1ubuntu1.1+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:20.04:LTS",
        "name": "nano",
        "purl": "pkg:deb/ubuntu/nano@4.8-1ubuntu1.1+esm1?arch=source\u0026distro=esm-infra/focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.8-1ubuntu1.1+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.3-1",
        "4.5-1",
        "4.7-1",
        "4.7-2",
        "4.8-1",
        "4.8-1ubuntu1",
        "4.8-1ubuntu1.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "nano",
            "binary_version": "6.2-1ubuntu0.2"
          },
          {
            "binary_name": "nano-tiny",
            "binary_version": "6.2-1ubuntu0.2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "nano",
        "purl": "pkg:deb/ubuntu/nano@6.2-1ubuntu0.2?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.2-1ubuntu0.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.6.1-1build1",
        "5.9-1",
        "6.0-1",
        "6.1-1",
        "6.2-1",
        "6.2-1ubuntu0.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "nano",
            "binary_version": "7.2-2ubuntu0.2"
          },
          {
            "binary_name": "nano-tiny",
            "binary_version": "7.2-2ubuntu0.2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "nano",
        "purl": "pkg:deb/ubuntu/nano@7.2-2ubuntu0.2?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.2-2ubuntu0.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "7.2-1",
        "7.2-2",
        "7.2-2build1",
        "7.2-2ubuntu0.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "nano",
            "binary_version": "8.4-1ubuntu0.1"
          },
          {
            "binary_name": "nano-tiny",
            "binary_version": "8.4-1ubuntu0.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:25.10",
        "name": "nano",
        "purl": "pkg:deb/ubuntu/nano@8.4-1ubuntu0.1?arch=source\u0026distro=questing"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.4-1ubuntu0.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "8.3-1",
        "8.4-1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "nano",
            "binary_version": "8.7.1-1ubuntu0.1"
          },
          {
            "binary_name": "nano-tiny",
            "binary_version": "8.7.1-1ubuntu0.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "nano",
        "purl": "pkg:deb/ubuntu/nano@8.7.1-1ubuntu0.1?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.7.1-1ubuntu0.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "8.4-1",
        "8.6-1",
        "8.7-1",
        "8.7.1-1"
      ]
    }
  ],
  "aliases": [],
  "details": "A flaw was found in nano. In environments with permissive umask settings, a local attacker can exploit incorrect directory permissions (0777 instead of 0700) for the `~/.local` directory. This allows the attacker to inject a malicious `.desktop` launcher, which could lead to unintended actions or information disclosure if the launcher is subsequently processed.",
  "id": "UBUNTU-CVE-2026-6842",
  "modified": "2026-06-05T01:03:25Z",
  "published": "2026-04-22T08:16:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-6842"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6842"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460018"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455314"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8386-1"
    }
  ],
  "related": [
    "USN-8386-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2026-6842"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2026-6842 (GCVE-0-2026-6842)

CERTFR-2026-AVI-0558

Solutions

FKIE_CVE-2026-6842

GHSA-CCFR-97MR-QQ8G

MSRC_CVE-2026-6842

OPENSUSE-SU-2026:10851-1

ubuntu-cve-2026-6842

Vulnerability from osv_ubuntu

Tags

Sightings

Nomenclature

Related by attack behaviour