https://vulnerability.circl.lu/sightings/feed 2026-07-24T04:12:59.129395+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/2fedb676-7015-47a2-b28f-0e7953ddc5fb/export 2026-07-24T04:12:59.144407+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "2fedb676-7015-47a2-b28f-0e7953ddc5fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mreeixm7hr2o", "content": "CVE-2026-64600: RefluXFS Linux Kernel Flaw Can Lead to Root Privilege Escalation\n\nThe existence of this vulnerability highlights a tension between advanced, performance-oriented filesystem features (like reflink) and fundamental security principles of data integrity and access cont\u2026", "creation_timestamp": "2026-07-24T03:03:28.644871Z"} 2026-07-24T03:03:28.644871+00:00 https://vulnerability.circl.lu/sighting/b649d97d-33c9-4ee5-93ce-59a7481e64c1/export 2026-07-24T04:12:59.146409+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "b649d97d-33c9-4ee5-93ce-59a7481e64c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mredb5f57s2a", "content": "Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs\n\nRefluXFS, a new Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local user overwrite root-owned files on an XFS filesystem and gain persistent root access.\u2026\n#hackernews #news", "creation_timestamp": "2026-07-24T02:41:12.057308Z"} 2026-07-24T02:41:12.057308+00:00 https://vulnerability.circl.lu/sighting/d89d1a6a-1ff2-426b-9848-4efceb015362/export 2026-07-24T04:12:59.146694+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d89d1a6a-1ff2-426b-9848-4efceb015362", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://thehackernews.com/2026/07/nine-year-old-refluxfs-linux-flaw-gives.html", "content": "RefluXFS, a new Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local user overwrite root-owned files on an XFS filesystem and gain persistent root access.\n\nQualys said default installations of Red Hat Enterprise Linux and its derivatives, Fedora Server, and Amazon Linux can meet the conditions for exploitation.\n\nThe company demonstrated the race", "creation_timestamp": "2026-07-24T01:00:49.600717Z"} 2026-07-24T01:00:49.600717+00:00 https://vulnerability.circl.lu/sighting/c918e0e6-b125-48a4-9155-11958e3e907c/export 2026-07-24T04:12:59.146924+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c918e0e6-b125-48a4-9155-11958e3e907c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "published-proof-of-concept", "source": "Telegram/4io6jbku3v9BzbUr54C3quHavfK_B8Aga3a7QXo1aoyRkdw", "content": "", "creation_timestamp": "2026-07-24T00:00:21.536793Z"} 2026-07-24T00:00:21.536793+00:00 https://vulnerability.circl.lu/sighting/e5020897-230f-43dc-8751-78cc30655fdc/export 2026-07-24T04:12:59.147079+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e5020897-230f-43dc-8751-78cc30655fdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94727", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-64600\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xBlackash\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-22 21:10:47\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-64600\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-24T00:00:21.411102Z"} 2026-07-24T00:00:21.411102+00:00 https://vulnerability.circl.lu/sighting/3eb7ac03-d68d-4902-897a-99bfc92894c3/export 2026-07-24T04:12:59.147297+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3eb7ac03-d68d-4902-897a-99bfc92894c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "published-proof-of-concept", "source": "Telegram/bSnNGG81Tfa4ZzCYQJT7Yhl3Lzwc1ptyxgLn3MJvAGoJufw", "content": "", "creation_timestamp": "2026-07-24T00:00:08.465081Z"} 2026-07-24T00:00:08.465081+00:00 https://vulnerability.circl.lu/sighting/626730e4-8b70-47d0-a97c-a060116c8e9d/export 2026-07-24T04:12:59.147489+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "626730e4-8b70-47d0-a97c-a060116c8e9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://t.me/BleepingComputer/25177", "content": "\u200aNew RefluXFS Linux flaw lets attackers gain root privileges\n\nA nine-year-old race condition vulnerability in the Linux kernel's XFS filesystem, tracked as CVE-2026-64600, allows local attackers to overwrite protected files and gain root privileges. [...]\n\nhttps://www.bleepingcomputer.com/news/linux/new-refluxfs-linux-flaw-lets-attackers-gain-root-privileges/", "creation_timestamp": "2026-07-24T00:00:08.341041Z"} 2026-07-24T00:00:08.341041+00:00 https://vulnerability.circl.lu/sighting/96f2b817-83fb-4286-abc7-97b1fc7dbe32/export 2026-07-24T04:12:59.147673+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "96f2b817-83fb-4286-abc7-97b1fc7dbe32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "published-proof-of-concept", "source": "Telegram/G7gh6nD4vTBaBHsx84JyRO9Z4uQ4qfzwao91GpvkL8WyWQ", "content": "", "creation_timestamp": "2026-07-24T00:00:08.154216Z"} 2026-07-24T00:00:08.154216+00:00 https://vulnerability.circl.lu/sighting/5cee3196-fbc2-4723-a595-600fecd209b0/export 2026-07-24T04:12:59.147827+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5cee3196-fbc2-4723-a595-600fecd209b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3mrdz3jeue22x", "content": "Linux Kernel\u306e\u8106\u5f31\u6027(RefluXFS:CVE-2026-64600)\n\n#security #vulnerability #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u8106\u5f31\u6027 #linux #kernel #xfs #lpe\n\nsecurity.sios.jp/vulnerabilit...", "creation_timestamp": "2026-07-23T23:39:08.212814Z"} 2026-07-23T23:39:08.212814+00:00 https://vulnerability.circl.lu/sighting/264ed812-e752-49b2-a67d-3e14bccd2022/export 2026-07-24T04:12:59.147981+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "264ed812-e752-49b2-a67d-3e14bccd2022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/foursignalsdev.bsky.social/post/3mrdtkoro4a2j", "content": "AI-discovered by Qualys & Anthropic: CVE-2026-64600 in XFS (since 4.11) lets any local user gain root, bypass SELinux, no logs. 16.4M systems affected. Patch now.", "creation_timestamp": "2026-07-23T22:00:13.420024Z"} 2026-07-23T22:00:13.420024+00:00