{"vulnerability": "cve-2026-108976", "sightings": [{"uuid": "2fff31fb-94ca-4cf4-bc4e-63b7e8fea481", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108976", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117424129025361042", "content": "CVE-2026-108976  GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inputs. NOTE: this issue exists because of an incomplete fix for CVE-2026-79992.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108976https://ftp.gnu.org/gnu/tramp/tramp-2.8.2.tar.gzhttps://www.openwall.com/lists/oss-security/2026/10/11/1https://www.openwall.com/lists/oss-security/2026/08/21/1#gnu #GNU #Emacs#CVE_2026_108976#bot", "creation_timestamp": "2026-10-11T20:20:16.162164Z"}, {"uuid": "3dcbf53a-df2f-474d-a977-705bda820210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108976", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxmx7zkihf2s", "content": "\ud83d\udfe0 CVE-2026-108976 - High (7.8)\n\nGNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename becaus...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-108976/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-11T21:30:57.772144Z"}, {"uuid": "eb63054b-2dca-42cf-8286-d2fef648f398", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108976", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mxnazsxwye2x", "content": "GNU Emacs\uff0831.2\u672a\u5bfe\u5fdc\uff09\u3068TRAMP\uff082.8.2\u307e\u3067\uff09\u306f\u3001\u30d5\u30a1\u30a4\u30eb\u540d\u7d4c\u7531\u3067OS\u30b3\u30de\u30f3\u30c9\u3092\u6ce8\u5165\u3055\u308c\u308b\u53ef\u80fd\u6027\u3002\nCVE-2026-108976 CVSS 7.8 | HIGH", "creation_timestamp": "2026-10-12T00:26:26.721606Z"}]}