Rapid7’s 2026 Global Cybersecurity Summit is now available on-demand.Watch sessions.
Rapid7

vulnerability

Alma Linux: CVE-2025-1244: Important: emacs security update (Multiple Advisories)

Severity
9
CVSS
(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Published
Feb 12, 2025
Added
Mar 19, 2025
Modified
Apr 17, 2026

Description

A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a redirect.

Solutions

alma-upgrade-emacsalma-upgrade-emacs-commonalma-upgrade-emacs-filesystemalma-upgrade-emacs-lucidalma-upgrade-emacs-noxalma-upgrade-emacs-terminal
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.