CVE-2026-96269
High
Description
GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the default configuration; no particular user settings are required to trigger it.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Emacs
PublishedSep 22, 2026
First seenSep 22, 2026
Weakness typeCWE-829CWE-829
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU Emacs | 28.1 ≤ v ≤ 31.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.