https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 17 Aug 2026 04:33:19 +0000 https://vulnerability.circl.lu/sighting/3bd85463-e8be-4b4f-89d6-ea4bddc0c3d5/export {"uuid": "3bd85463-e8be-4b4f-89d6-ea4bddc0c3d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14863", "type": "seen", "source": "https://infosec.exchange/users/catc0n/statuses/117097018446805721", "content": "New vulnerability disclosure from @chocapikk_:\nCVE-2026-14863 is an OS command injection-to-RCE in FileRun, a commercial self-hosted file manager. Internet footprint is an appreciable 3.5K or so based on the team's ASM queries. Good stuff as always from Valentin. \nhttps://www.vulncheck.com/blog/filerun-thumbnail-command-injection-rce", "creation_timestamp": "2026-08-15T01:51:48.148784Z"} {"uuid": "3bd85463-e8be-4b4f-89d6-ea4bddc0c3d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14863", "type": "seen", "source": "https://infosec.exchange/users/catc0n/statuses/117097018446805721", "content": "New vulnerability disclosure from @chocapikk_:\nCVE-2026-14863 is an OS command injection-to-RCE in FileRun, a commercial self-hosted file manager. Internet footprint is an appreciable 3.5K or so based on the team's ASM queries. Good stuff as always from Valentin. \nhttps://www.vulncheck.com/blog/filerun-thumbnail-command-injection-rce", "creation_timestamp": "2026-08-15T01:51:48.148784Z"} https://vulnerability.circl.lu/sighting/3bd85463-e8be-4b4f-89d6-ea4bddc0c3d5/export Sat, 15 Aug 2026 01:51:48 +0000 https://vulnerability.circl.lu/sighting/12aa4c5e-205d-430b-9eca-ad00547b1ebe/export {"uuid": "12aa4c5e-205d-430b-9eca-ad00547b1ebe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14863", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mszg7yjidu2m", "content": "Daily IT Security Digest \u2014 2026-08-14\n### 6. FileRun OS Command Injection Leading to Remote Code Execution (CVE-2026-14863)\nVulnCheck disclosed CVE-2026-14863, an OS command injection in FileRun that escalates to remote code execution via the file manager's API. The vulnerability affects the", "creation_timestamp": "2026-08-14T05:25:20.682560Z"} {"uuid": "12aa4c5e-205d-430b-9eca-ad00547b1ebe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14863", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mszg7yjidu2m", "content": "Daily IT Security Digest \u2014 2026-08-14\n### 6. FileRun OS Command Injection Leading to Remote Code Execution (CVE-2026-14863)\nVulnCheck disclosed CVE-2026-14863, an OS command injection in FileRun that escalates to remote code execution via the file manager's API. The vulnerability affects the", "creation_timestamp": "2026-08-14T05:25:20.682560Z"} https://vulnerability.circl.lu/sighting/12aa4c5e-205d-430b-9eca-ad00547b1ebe/export Fri, 14 Aug 2026 05:25:20 +0000 https://vulnerability.circl.lu/sighting/2f0cdb6a-7c58-4582-897e-05c3e0f9c092/export {"uuid": "2f0cdb6a-7c58-4582-897e-05c3e0f9c092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14863", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117089260878905642", "content": "New.\n\"Today VulnCheck is disclosing CVE-2026-14863, an OS command injection to remote code execution in FileRun, a commercial self-hosted file manager. It is being disclosed in accordance with VulnCheck's coordinated vulnerability disclosure policy.\"\n\"The motivation was deliberate. Open-source codebases are getting shredded by AI-assisted auditing, where every researcher and their LLM greps the same GitHub repos and finds the same bugs.\"\nVulncheck: FileRun: When Your File Manager Runs Your Files https://www.vulncheck.com/blog/filerun-thumbnail-command-injection-rce @vulncheck #infosec #opensource #vulnerability", "creation_timestamp": "2026-08-13T16:58:54.158131Z"} {"uuid": "2f0cdb6a-7c58-4582-897e-05c3e0f9c092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14863", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117089260878905642", "content": "New.\n\"Today VulnCheck is disclosing CVE-2026-14863, an OS command injection to remote code execution in FileRun, a commercial self-hosted file manager. It is being disclosed in accordance with VulnCheck's coordinated vulnerability disclosure policy.\"\n\"The motivation was deliberate. Open-source codebases are getting shredded by AI-assisted auditing, where every researcher and their LLM greps the same GitHub repos and finds the same bugs.\"\nVulncheck: FileRun: When Your File Manager Runs Your Files https://www.vulncheck.com/blog/filerun-thumbnail-command-injection-rce @vulncheck #infosec #opensource #vulnerability", "creation_timestamp": "2026-08-13T16:58:54.158131Z"} https://vulnerability.circl.lu/sighting/2f0cdb6a-7c58-4582-897e-05c3e0f9c092/export Thu, 13 Aug 2026 16:58:54 +0000