https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 21 Aug 2026 16:24:00 +0000 https://vulnerability.circl.lu/sighting/a3f4c04f-3fc5-481d-b2dd-2f5b4a948ab2/export {"uuid": "a3f4c04f-3fc5-481d-b2dd-2f5b4a948ab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47187", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtikxlumky2j", "content": "CVE-2026-47187 - sshfs-fuse\nA security issue in the Debian Linux package manager allows attackers to execute malicious code on a server without being authenticated. This could lead to unauthorized\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sshfsfuse #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-08-20T06:00:03.973894Z"} {"uuid": "a3f4c04f-3fc5-481d-b2dd-2f5b4a948ab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47187", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtikxlumky2j", "content": "CVE-2026-47187 - sshfs-fuse\nA security issue in the Debian Linux package manager allows attackers to execute malicious code on a server without being authenticated. This could lead to unauthorized\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sshfsfuse #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-08-20T06:00:03.973894Z"} https://vulnerability.circl.lu/sighting/a3f4c04f-3fc5-481d-b2dd-2f5b4a948ab2/export Thu, 20 Aug 2026 06:00:03 +0000 https://vulnerability.circl.lu/sighting/f0c4b32d-6ecf-433f-9b58-4a693c41328b/export {"uuid": "f0c4b32d-6ecf-433f-9b58-4a693c41328b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47187", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthexp7taa2t", "content": "CVE-2026-47187\nSSHFS, a network filesystem client, allows a malicious SFTP server to access and modify local files on the client machine if the server returns certain types of symlinks. This issue can be exploited by\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-19T18:40:05.264782Z"} {"uuid": "f0c4b32d-6ecf-433f-9b58-4a693c41328b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47187", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthexp7taa2t", "content": "CVE-2026-47187\nSSHFS, a network filesystem client, allows a malicious SFTP server to access and modify local files on the client machine if the server returns certain types of symlinks. This issue can be exploited by\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-19T18:40:05.264782Z"} https://vulnerability.circl.lu/sighting/f0c4b32d-6ecf-433f-9b58-4a693c41328b/export Wed, 19 Aug 2026 18:40:05 +0000 https://vulnerability.circl.lu/sighting/bf916072-ac6e-4305-bd37-80c4606dc890/export {"uuid": "bf916072-ac6e-4305-bd37-80c4606dc890", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47187", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mth4mofmdt2j", "content": "\ud83d\udea8 CVE-2026-47187 \u2014 CVSS 9.3 CRITICAL\n\nSSHFS is a network filesystem client for connecting to SSH servers. Prior to version 3.7.6, a rogue SFTP se...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-47187\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T16:10:45.411609Z"} {"uuid": "bf916072-ac6e-4305-bd37-80c4606dc890", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47187", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mth4mofmdt2j", "content": "\ud83d\udea8 CVE-2026-47187 \u2014 CVSS 9.3 CRITICAL\n\nSSHFS is a network filesystem client for connecting to SSH servers. Prior to version 3.7.6, a rogue SFTP se...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-47187\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T16:10:45.411609Z"} https://vulnerability.circl.lu/sighting/bf916072-ac6e-4305-bd37-80c4606dc890/export Wed, 19 Aug 2026 16:10:45 +0000 https://vulnerability.circl.lu/sighting/49babe28-0d2f-41c2-82c6-44e8ef6b3054/export {"uuid": "49babe28-0d2f-41c2-82c6-44e8ef6b3054", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47187", "type": "seen", "source": "https://bsky.app/profile/evirus.bsky.social/post/3mo734wrr2c2x", "content": "I updated sshfs to 3.7.6-bp160.1.1 on Leap 16 and all my symlinks that traversed folders on remote machines broke. Looks like this is a deliberate change to fix CVE-2026-47187 symlink escape shenanigans. Adding follow_symlinks after -o restores the old behavior.", "creation_timestamp": "2026-06-13T20:17:04.767870Z"} {"uuid": "49babe28-0d2f-41c2-82c6-44e8ef6b3054", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47187", "type": "seen", "source": "https://bsky.app/profile/evirus.bsky.social/post/3mo734wrr2c2x", "content": "I updated sshfs to 3.7.6-bp160.1.1 on Leap 16 and all my symlinks that traversed folders on remote machines broke. Looks like this is a deliberate change to fix CVE-2026-47187 symlink escape shenanigans. Adding follow_symlinks after -o restores the old behavior.", "creation_timestamp": "2026-06-13T20:17:04.767870Z"} https://vulnerability.circl.lu/sighting/49babe28-0d2f-41c2-82c6-44e8ef6b3054/export Sat, 13 Jun 2026 20:17:04 +0000 https://vulnerability.circl.lu/sighting/bfaaf389-63e5-4dfc-8c6c-335888707482/export {"uuid": "bfaaf389-63e5-4dfc-8c6c-335888707482", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47187", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mn34f42qcq2r", "content": "CVE-2026-47187, CVE-2026-48711: sshfs", "creation_timestamp": "2026-05-30T13:03:24.621529Z"} {"uuid": "bfaaf389-63e5-4dfc-8c6c-335888707482", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47187", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mn34f42qcq2r", "content": "CVE-2026-47187, CVE-2026-48711: sshfs", "creation_timestamp": "2026-05-30T13:03:24.621529Z"} https://vulnerability.circl.lu/sighting/bfaaf389-63e5-4dfc-8c6c-335888707482/export Sat, 30 May 2026 13:03:24 +0000 https://vulnerability.circl.lu/sighting/ec3a706b-0d64-4703-aafe-2d118ef8d8ae/export {"uuid": "ec3a706b-0d64-4703-aafe-2d118ef8d8ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47187", "type": "seen", "source": "https://infosec.exchange/users/harrysintonen/statuses/116663533676457323", "content": "CVE-2026-47187: Symlink escape - rogue SFTP server -> local file read/writeSeverity: Critical (CVSS 9.3, CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N)CWE: CWE-59 (Improper Link Resolution Before File Access)\nA rogue SFTP server can return symlink targets (absolute paths or relative \"../../../\" escapes) that sshfs passes to the kernel unchanged. The kernel resolves them on the client's local filesystem, so an ordinary \"cp\" through the mountpoint can read local files back to the server or write server-controlled bytes to local files. transform_symlinks does not cover relative targets.\nhttps://www.openwall.com/lists/oss-security/2026/05/30/3\n#CVE_2026_47187", "creation_timestamp": "2026-05-30T12:30:53.342192Z"} {"uuid": "ec3a706b-0d64-4703-aafe-2d118ef8d8ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47187", "type": "seen", "source": "https://infosec.exchange/users/harrysintonen/statuses/116663533676457323", "content": "CVE-2026-47187: Symlink escape - rogue SFTP server -> local file read/writeSeverity: Critical (CVSS 9.3, CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N)CWE: CWE-59 (Improper Link Resolution Before File Access)\nA rogue SFTP server can return symlink targets (absolute paths or relative \"../../../\" escapes) that sshfs passes to the kernel unchanged. The kernel resolves them on the client's local filesystem, so an ordinary \"cp\" through the mountpoint can read local files back to the server or write server-controlled bytes to local files. transform_symlinks does not cover relative targets.\nhttps://www.openwall.com/lists/oss-security/2026/05/30/3\n#CVE_2026_47187", "creation_timestamp": "2026-05-30T12:30:53.342192Z"} https://vulnerability.circl.lu/sighting/ec3a706b-0d64-4703-aafe-2d118ef8d8ae/export Sat, 30 May 2026 12:30:53 +0000