A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a redirect.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0599-1 advisory.

    - CVE-2025-1244: improper handling of custom 'man' URI schemes allow for shell command injections.
    (bsc#1237091)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of emacs installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-1244 advisory.

  - A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated     attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking     users into visiting a specially crafted website or an HTTP URL with a redirect. (CVE-2025-1244)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of emacs installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-1244 advisory.

  - A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated     attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking     users into visiting a specially crafted website or an HTTP URL with a redirect. (CVE-2025-1244)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0589-1 advisory.

    - CVE-2025-1244: improper handling of custom 'man' URI schemes allow for shell command injections.
    (bsc#1237091)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:0574-1 advisory.

    - CVE-2025-1244: improper handling of custom 'man' URI schemes allow for shell command injections.
    (bsc#1237091)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
216661	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : emacs (SUSE-SU-2025:0599-1)	Nessus	SuSE Local Security Checks	high
216631	Azure Linux 3.0 Security Update: emacs (CVE-2025-1244)	Nessus	Azure Linux Local Security Checks	high
216624	CBL Mariner 2.0 Security Update: emacs (CVE-2025-1244)	Nessus	MarinerOS Local Security Checks	high
216515	SUSE SLES15 Security Update : emacs (SUSE-SU-2025:0589-1)	Nessus	SuSE Local Security Checks	high
216445	SUSE SLES12 Security Update : emacs (SUSE-SU-2025:0574-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2025-1244

high

Tenable Plugins

high

high

high

high

high