CVE-2026-6843
A flaw was found in nano.
Published Apr 22, 2026 · updated Sep 1, 2026 · gnu nano
A flaw was found in nano. A local user could exploit a format string vulnerability in the function. By creating a directory with a name containing specifiers, the application attempts to display this name, leading to a segmentation fault (SEGV). This results in a Denial of Service (DoS) for the application.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Apr 22, 2026 · NIST NVD
Detected
A flaw was found in nano. A local user could exploit a format string vulnerability in the function. By creating a directory with a name containing specifiers, the application attempts to display this name, leading to a segmentation fault (SEGV). This results in a Denial of Service (DoS) for the application.
Sep 1, 2026 · NIST NVD
Updated
A flaw was found in nano. A local user could exploit a format string vulnerability in the function. By creating a directory with a name containing specifiers, the application attempts to display this name, leading to a segmentation fault (SEGV). This results in a Denial of Service (DoS) for the application.
Affected
- cpe gnu/nano8.7
- cpe redhat/enterprise linux10.0
- cpe redhat/enterprise linux6.0
- cpe redhat/enterprise linux7.0
- cpe redhat/enterprise linux8.0
- cpe redhat/enterprise linux9.0
- cpe redhat/openshift container platform4.0
Sources
- CVE.orgVulnerability recordCVE-2026-6843
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-6843
A flaw was found in nano. A local user could exploit a format string vulnerability in the function. By creating a directory with a name containing specifiers, the application attempts to display this name, leading to a segmentation fault (SEGV). This resul
nvd.nist.gov