Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-121550

nnn through 5.3 Symlink-Following Write via NNN_FIFO Handling

nnn through 5.3 contains an insecure file handling vulnerability that allows local attackers to redirect writes because main() accepts an existing NNN_FIFO path without verifying it is a FIFO. Attackers can pre-create the documented predictable /tmp/nnn.fifo path as a symlink or readable regular file, causing victim-writable files to be overwritten or leaking the victim's browsed paths.

CVSS 4.0 · 1 Low EPSS < 1% KEV · Not listed
Vendors
Jarun
Products
Nnn
CVE-2026-121549

nnn through 5.3 Insecure Temporary File Symlink Overwrite via pdfread and nuke Plugins

nnn through 5.3 contains an insecure temporary file vulnerability in the pdfread and nuke plugins that allows local attackers to overwrite files by exploiting predictable paths in /tmp. Attackers can pre-create a symlink at the name-derived or PID-derived path so the victim's plugin truncates and overwrites any file the victim can write.

CVSS 4.0 · 4.1 Medium EPSS < 1% KEV · Not listed
Vendors
Jarun
Products
Nnn
CVE-2026-121548

nnn through 5.3 OS Command Injection via togglex Plugin

Jarun nnn through 5.3 contains an OS command injection vulnerability in plugins/togglex that allows attackers to execute commands via crafted filenames. Attackers can place files whose names contain a double quote and shell syntax, which xargs -I splices into an sh -c script, running commands as the user invoking togglex.

CVSS 4.0 · 8.4 High EPSS 1.2% KEV · Not listed
Vendors
Jarun
Products
Nnn
CVE-2025-13566

jarun nnn nnn.c run_cmd_as_plugin double free

A security vulnerability has been detected in jarun nnn up to 5.1. The impacted element is the function show_content_in_floating_window/run_cmd_as_plugin of the file nnn/src/nnn.c. The manipulation leads to double free. An attack has to be approached locally. The identifier of the patch is 2f07ccdf21e705377862e5f9dfa31e1694979ac7. It is suggested to install a patch to address this issue.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Jarun
Products
Nnn