High severityNVD Advisory· Published Sep 22, 2026

CVE-2026-96269

Description

GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the default configuration; no particular user settings are required to trigger it.

Patches

Vulnerability mechanics

References

debbugs.gnu.org/cgi/bugreport.cginvd
yhetil.org/emacs/[email protected]/T/nvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000