AZL-91119 CVE-2026-57453 affecting package vim for versions less than 9.2.0735-1

🗓️ 25 Jun 2026 16:16:42Reported by GoogleType

osv🔗 osv.dev👁 7 Views

PowerShell command injection in Vim's zip plugin via crafted zip entry names.

Reporter	Title	Published	Views	Family All 41
attackerkb	CVE-2026-57453	25 Jun 202615:26	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : vim-common, vim-data, vim-default-editor (ALAS2023-2026-1940)	20 Jul 202600:00	–	nessus
Tenable Nessus	Photon OS 5.0: Vim PHSA-2026-5.0-92-0950	12 Aug 202600:00	–	nessus
Tenable Nessus	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : Vim vulnerabilities (USN-8500-1)	3 Jul 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-57453	30 Jun 202600:00	–	nessus
Tenable Nessus	Vim 9.1.1784 < 9.2.0678 Command Injection (GHSA-x5fg-h5w9-9frf)	2 Jul 202600:00	–	nessus
Amazon	Important: vim	20 Jul 202600:00	–	amazon
AlpineLinux	CVE-2026-57453	25 Jun 202615:26	–	alpinelinux
BDU FSTEC	The vulnerability in the built-in ZIP-plugin of the runtime/autoload/zip.vim text editor in Vim allows a hacker to execute arbitrary commands.	11 Sep 202600:00	–	bdu_fstec
CBLMariner	CVE-2026-57453 affecting package vim for versions less than 9.2.0735-1	1 Jul 202602:06	–	cbl_mariner