{"vulnerability": "CVE-2026-31478", "sightings": [{"uuid": "2f4e082e-f139-427d-b977-ba885b64574a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31478", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116448996317066096", "content": "", "creation_timestamp": "2026-04-22T15:11:11.854246Z"}, {"uuid": "05889dea-d0d5-49ec-8ff8-79adb241e809", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-31478", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260506", "content": "", "creation_timestamp": "2026-05-05T20:00:00.000000Z"}, {"uuid": "3ed5cc39-0829-45f7-baea-f2a467fc8f62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-31478", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-02T05:48:08.806719Z"}, {"uuid": "d5a1c565-0b5c-400d-8585-e2965af9db75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31478", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxgsib7fia2l", "content": "CVE-2026-31478 - linux\nThe ksmbd component in certain Ubuntu Linux kernels could use the wrong size when building response messages, which might cause data handling errors. The fix changes the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#linux #canonical #Ubuntu2204LTS #CVE #infosec", "creation_timestamp": "2026-10-09T10:50:06.251488Z"}, {"uuid": "a47536ad-7c04-4a10-bcb9-4ab696f64408", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31478", "type": "seen", "source": "https://bsky.app/profile/progressiverobot.bsky.social/post/3mxisw5tvbo2p", "content": "Active zero-day in Gemini CLI (CVE-2026-31478): arbitrary command execution, credential theft, and it's being exploited right now. Fix ships in v0.43.1 \u2014 update today if you use it. Agentic AI toolchains are becoming prime attack targets. #AI #CyberSecurity", "creation_timestamp": "2026-10-10T06:03:14.037911Z"}]}