CVE-2026-65611

creationtimestamp| type| source ---|---|--- 2026-08-19 16:45:05+00:00| seen| https://cert.pl/en/posts/2026/08/CVE-2026-65609...

CVE-2026-65611 Shell Command Injection in nnn

nnn does not sanitize the path variable. An attacker can create a directory on a shared filesystem, removable media, or inside an extracted archive whose name contains a single quote followed by shell syntax. If the victim enters that directory in nnn and uses the batch copy or move workflow, the...