https://vulnerability.circl.lu/sightings/feed 2026-08-17T04:33:19.633632+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/3bd85463-e8be-4b4f-89d6-ea4bddc0c3d5/export 2026-08-17T04:33:19.648750+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3bd85463-e8be-4b4f-89d6-ea4bddc0c3d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14863", "type": "seen", "source": "https://infosec.exchange/users/catc0n/statuses/117097018446805721", "content": "New vulnerability disclosure from @chocapikk_:\nCVE-2026-14863 is an OS command injection-to-RCE in FileRun, a commercial self-hosted file manager. Internet footprint is an appreciable 3.5K or so based on the team's ASM queries. Good stuff as always from Valentin. \nhttps://www.vulncheck.com/blog/filerun-thumbnail-command-injection-rce", "creation_timestamp": "2026-08-15T01:51:48.148784Z"} 2026-08-15T01:51:48.148784+00:00 https://vulnerability.circl.lu/sighting/12aa4c5e-205d-430b-9eca-ad00547b1ebe/export 2026-08-17T04:33:19.650591+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "12aa4c5e-205d-430b-9eca-ad00547b1ebe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14863", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mszg7yjidu2m", "content": "Daily IT Security Digest \u2014 2026-08-14\n### 6. FileRun OS Command Injection Leading to Remote Code Execution (CVE-2026-14863)\nVulnCheck disclosed CVE-2026-14863, an OS command injection in FileRun that escalates to remote code execution via the file manager's API. The vulnerability affects the", "creation_timestamp": "2026-08-14T05:25:20.682560Z"} 2026-08-14T05:25:20.682560+00:00 https://vulnerability.circl.lu/sighting/2f0cdb6a-7c58-4582-897e-05c3e0f9c092/export 2026-08-17T04:33:19.650727+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "2f0cdb6a-7c58-4582-897e-05c3e0f9c092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14863", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117089260878905642", "content": "New.\n\"Today VulnCheck is disclosing CVE-2026-14863, an OS command injection to remote code execution in FileRun, a commercial self-hosted file manager. It is being disclosed in accordance with VulnCheck's coordinated vulnerability disclosure policy.\"\n\"The motivation was deliberate. Open-source codebases are getting shredded by AI-assisted auditing, where every researcher and their LLM greps the same GitHub repos and finds the same bugs.\"\nVulncheck: FileRun: When Your File Manager Runs Your Files https://www.vulncheck.com/blog/filerun-thumbnail-command-injection-rce @vulncheck #infosec #opensource #vulnerability", "creation_timestamp": "2026-08-13T16:58:54.158131Z"} 2026-08-13T16:58:54.158131+00:00