{"vulnerability": "cve-2026-8804", "sightings": [{"uuid": "fdcb7c50-90c1-4916-93f1-b5c2e8b7633d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8804", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mpq4ww3j3j2y", "content": "Puppet stored the passwords admins told it to keep secret in cleartext on every managed node (CVE-2026-8804).\n\nThe 'sensitive' flag silently stopped working in Puppet Core 8.x and Enterprise.\n\nFix: upgrade, then rotate the exposed secrets.", "creation_timestamp": "2026-07-03T08:29:40.505932Z"}, {"uuid": "765274db-ac30-4db6-a96a-372a13f1d09e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8804", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpqcmxo5yy2h", "content": "CVE-2026-8804 - Cleartext Storage of Sensitive Information for Puppet Resource API\nCVE ID : CVE-2026-8804\n \n Published : July 3, 2026, 7:40 a.m. | 2\u00a0hours, 6\u00a0minutes ago\n \n Description : Puppet resource_api (shipped in Puppet Core 8.x and Puppet Enterprise 2023.8.x and 2025.x)...", "creation_timestamp": "2026-07-03T10:11:28.479484Z"}, {"uuid": "dec2f501-3e77-4fd7-8732-8e7140599d71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8804", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mprm77p2yk2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-8804 \u0432 Puppet: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/2A839C11-AEFA-4B9E-A13B-819F53383ECB", "creation_timestamp": "2026-07-03T22:35:24.318447Z"}, {"uuid": "4fc1d93e-0fa8-4170-9e7b-e5e12c14e6bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88048", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/53ew2oieaxu2w", "content": "CVE-2026-88048 - Tesseract: Heap out-of-bounds write/read in FullyConnected::Forward via layer/weight-matrix dimension mismatch\nCVE ID : CVE-2026-88048\n \n Published : Sept. 10, 2026, 5:17 p.m. | 15\u00a0minutes ago\n \n Description : Tesseract is an open source OCR engine. In version...", "creation_timestamp": "2026-09-10T17:39:55.776627Z"}, {"uuid": "987f799b-d2d0-4efd-a23c-2d71e0d5b49a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88044", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv6luoo7m722", "content": "CVE-2026-88044 - rclone\nVersions of rclone released between 1.70.0 and 1.75.1 may ignore required login checks for its built\u2011in FTP and Amazon S3 servers. This means an unauthenticated user could connect and view or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rclone #CVE #infosec", "creation_timestamp": "2026-09-10T17:40:05.710762Z"}, {"uuid": "d2dc66c5-cd06-456a-87dc-33f7e83cd9c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88047", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/33w7am4gt6qjp", "content": "CVE-2026-88047 - Tesseract: ReadNormProtos stack buffer overflow\nCVE ID : CVE-2026-88047\n \n Published : Sept. 10, 2026, 5:17 p.m. | 15\u00a0minutes ago\n \n Description : Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos in src/classify/no...", "creation_timestamp": "2026-09-10T17:51:56.020477Z"}, {"uuid": "0fd1e8bf-852d-4908-9497-a040f27445e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88046", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/f3syrtwtj43lj", "content": "CVE-2026-88046 - rclone: source object names can escape the configured root on upload\nCVE ID : CVE-2026-88046\n \n Published : Sept. 10, 2026, 5:17 p.m. | 15\u00a0minutes ago\n \n Description : rclone is a command-line program to sync files and directories to and from different cloud s...", "creation_timestamp": "2026-09-10T17:57:56.353199Z"}, {"uuid": "08a56c11-47b3-4046-a987-d3b4056aae7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88044", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mv6mzj75ih2s", "content": "\ud83d\udd34 CVE-2026-88044 - Critical (9.1)\n\nrclone is a command-line program to sync files and directories to and from different cloud storag...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-88044/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-10T18:00:42.180218Z"}, {"uuid": "4b1fcf2a-2430-4d75-ae8d-da1e96617ba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88045", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mv6mzpx3oz2k", "content": "\ud83d\udfe0 CVE-2026-88045 - High (7.5)\n\nrclone is a command-line program to sync files and directories to and from different cloud storag...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-88045/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-10T18:00:49.398674Z"}, {"uuid": "fd625660-e3b9-41eb-9788-0e42b8f70682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88049", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4snaaeueunf7v", "content": "CVE-2026-88049 - Tesseract: Heap out-of-bounds write in LSTM::Forward via na_/gate-matrix dimension mismatch\nCVE ID : CVE-2026-88049\n \n Published : Sept. 10, 2026, 5:17 p.m. | 15\u00a0minutes ago\n \n Description : Tesseract is an open source OCR engine. In version 5.5.3 and earlier,...", "creation_timestamp": "2026-09-10T18:05:55.768507Z"}, {"uuid": "bcbf299d-bbf1-479c-8bc1-973b99a4a285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88044", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv6njcfhrb2p", "content": "\ud83d\udea8 CVE-2026-88044 \u2014 CVSS 9.1 CRITICAL\n\nrclone is a command-line program to sync files and directories to and from different cloud storage provider...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-88044\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T18:09:31.106259Z"}, {"uuid": "9ca7d89a-d4ff-4ebd-8676-63b27291ff6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88044", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mv6p7kgpnb26", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88044: rclone is a command-line program to sync files and directories to and from different cloud storage providers\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-88044\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-10T18:39:51.657681Z"}, {"uuid": "326f28e5-526c-4eda-a732-0c1c94ad7952", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88044", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mv6st7d4422z", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88044: rclone is a command-line program to sync files and directories to and from different cloud storage providers\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-88044\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-10T19:44:32.236586Z"}, {"uuid": "12dd447b-48df-4842-b33f-57d76cd66497", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-88044", "type": "published-proof-of-concept", "source": "https://github.com/rclone/rclone/security/advisories/GHSA-p569-5gjg-9cmj", "content": "", "creation_timestamp": "2026-09-11T00:35:21.074389Z"}, {"uuid": "0b16c893-9e83-49da-a6f0-444f18e5ac05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-88046", "type": "published-proof-of-concept", "source": "https://github.com/rclone/rclone/security/advisories/GHSA-38xv-hf3p-h7mq", "content": "", "creation_timestamp": "2026-09-11T00:35:25.412242Z"}, {"uuid": "65b40e21-9c45-4cf5-aa9a-3798a5d40c1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-88045", "type": "published-proof-of-concept", "source": "https://github.com/rclone/rclone/security/advisories/GHSA-2p48-j3qc-rx9f", "content": "", "creation_timestamp": "2026-09-11T00:35:27.904345Z"}, {"uuid": "7b8c5d94-1b27-401f-939e-a834a743dd6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88044", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mv7p55z6yi2q", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88044: rclone is a command-line program to sync files and directories to and from different cloud storage providers\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-88044\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T04:11:11.138585Z"}, {"uuid": "a9025708-738f-4816-9c70-c58a5fbd8033", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88044", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mv7wdbb42r2p", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88044: rclone is a command-line program to sync files and directories to and from different cloud storage providers\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-88044\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T06:19:52.364205Z"}, {"uuid": "34af2d58-287e-4322-88a3-a7184e498b6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88044", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvaegrqlcv2u", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88044: rclone is a command-line program to sync files and directories to and from different cloud storage providers\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-88044\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T10:32:22.464421Z"}, {"uuid": "09cc461c-2e9b-46f7-a7d9-1e80c7c6d37d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88046", "type": "seen", "source": "https://gist.github.com/alon710/31db43b5866ca861d12e36661fc88337", "content": "# CVE-2026-88046: CVE-2026-88046: Directory Traversal and Root Confinement Escape in rclone Core Engine\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-09-10\n> **Full Report:** https://cvereports.com/reports/CVE-2026-88046\n\n## Summary\nCVE-2026-88046 (also tracked via GHSA-38xv-hf3p-h7mq) is a directory traversal and root confinement escape vulnerability residing in the core listing and transfer logic of rclone. Prior to version 1.75.1, raw relative parent-directory sequences returned by flat-keyspace source backends are trusted and processed without proper sanitization, enabling writes outside the designated target root or bucket.\n\n## TL;DR\nA path traversal vulnerability in rclone versions prior to 1.75.1 allows attackers with control over a source flat-keyspace storage provider to write arbitrary files to unauthorized directories on target backends.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-22\n- **Attack Vector**: Network / User Interaction Required\n- **CVSS v3.1**: 5.3 (Medium)\n- **Exploit Status**: PoC Available\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- rclone\n- **rclone**: < 1.75.1 (Fixed in: `1.75.1`)\n\n## Mitigation\n\n- Upgrade rclone client binaries to version 1.75.1 or newer.\n- Audit existing cloud storage namespaces for relative parent-directory sequences (..).\n- Apply principle of least privilege to service accounts used during rclone executions.\n\n**Remediation Steps:**\n1. Identify all production environments using rclone via 'rclone version'.\n2. Deploy rclone 1.75.1 or higher to all running container environments, cron servers, and user workstations.\n3. Audit automated workflows targeting external/untrusted data sources and establish strict validation boundaries.\n\n## References\n\n- [rclone Fix Commit 57842c5ee4e1407eda06a414a36510cce2db4252](https://github.com/rclone/rclone/commit/57842c5ee4e1407eda06a414a36510cce2db4252)\n- [rclone Release v1.75.1](https://github.com/rclone/rclone/releases/tag/v1.75.1)\n- [GitHub Security Advisory GHSA-38xv-hf3p-h7mq](https://github.com/rclone/rclone/security/advisories/GHSA-38xv-hf3p-h7mq)\n- [NVD CVE-2026-88046](https://nvd.nist.gov/vuln/detail/CVE-2026-88046)\n- [CVE.org CVE-2026-88046](https://www.cve.org/CVERecord?id=CVE-2026-88046)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-88046) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-11T11:32:31.522761Z"}, {"uuid": "1bd1c4c7-079c-4002-ad9a-849b1d49f21d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88044", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvahz32he72c", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88044: rclone: RC per-server auth-proxy bypass\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-88044\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T11:36:19.842054Z"}, {"uuid": "b2fd87f3-7762-4066-81b0-1b10d006d104", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88045", "type": "seen", "source": "https://gist.github.com/alon710/51fe1c5c2b206d4c1fc4589bae05ba41", "content": "# CVE-2026-88045: CVE-2026-88045: Denial of Service via Uncontrolled Memory Preallocation and Integer Overflow in rclone S3 Compatibility Layer\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-09-10\n> **Full Report:** https://cvereports.com/reports/CVE-2026-88045\n\n## Summary\nA high-severity Denial of Service (DoS) vulnerability in the S3 compatibility layer of rclone allows unauthenticated remote attackers (or authenticated attackers depending on configuration) to trigger rapid memory exhaustion and process termination. The flaw lies in the handling of S3 multipart uploads, where rclone eagerly allocates buffers based on untrusted size headers and fails to prevent integer overflows in its concurrent request admission control.\n\n## TL;DR\nrclone is vulnerable to Denial of Service via uncontrolled resource preallocation and integer overflow in its S3 multipart upload system. Attackers can trigger Out-Of-Memory crashes by sending crafted HTTP headers with extremely large size parameters.\n\n## Technical Details\n\n- **CWE ID**: CWE-789 / CWE-190\n- **Attack Vector**: Network\n- **CVSS**: 7.5 (High)\n- **EPSS**: N/A\n- **Impact**: Availability (Denial of Service)\n- **Exploit Status**: None / PoC\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- rclone S3 compatibility layer (serve S3)\n- **rclone**: == 1.75.0 (Fixed in: `1.75.1`)\n\n## Mitigation\n\n- Upgrade rclone to version 1.75.1 or later\n- Enforce authentication on S3 endpoints using the --auth-key flag\n- Deploy a reverse proxy to drop requests with anomalous Content-Length values\n- Reduce idle network socket timeouts on front-end reverse proxies\n\n**Remediation Steps:**\n1. Identify all deployed rclone instances exposing S3 service endpoints (`serve s3`)\n2. Download and install rclone version 1.75.1 or higher\n3. Restart the rclone service to apply the binary update\n4. Verify that client-supplied headers with excessive sizes no longer trigger OOM spikes\n\n## References\n\n- [rclone Security Advisory GHSA-2p48-j3qc-rx9f](https://github.com/rclone/rclone/security/advisories/GHSA-2p48-j3qc-rx9f)\n- [rclone Issue 9616](https://github.com/rclone/rclone/issues/9616)\n- [rclone v1.75.1 Release Notes](https://github.com/rclone/rclone/releases/tag/v1.75.1)\n- [NVD CVE-2026-88045](https://nvd.nist.gov/vuln/detail/CVE-2026-88045)\n- [CVE-2026-88045 Record](https://www.cve.org/CVERecord?id=CVE-2026-88045)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-88045) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-11T12:32:14.108252Z"}, {"uuid": "e1ba7a7a-bb1b-49c3-943c-a6ca84aec2fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88044", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvasjhuqzq27", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88044: rclone: RC per-server auth-proxy bypass\nCVSS 9.1 \u00b7 EPSS 0.5%\nhttps://beta.vulnsea.com/cve/CVE-2026-88044\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T14:44:25.064051Z"}, {"uuid": "20308588-0100-47cd-a785-cdd11f050824", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88044", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rclone-poc-pubblici-per-lo-sfruttamento-delle-cve-2026-88018-cve-2026-88044-cve-2026-88045-cve-2026-88016-e-cve-2026-88017", "content": "Disponibili Proof of Concept (PoC) per le CVE-2026-88018, CVE-2026-88044, CVE-2026-88045, CVE-2026-88016 e CVE-2026-88017 - gi\u00e0 sanate dal vendor - presenti in Rclone.", "creation_timestamp": "2026-09-11T16:00:46.739716Z"}, {"uuid": "a97f0a0a-717b-440e-86a7-cfe6378d8633", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88045", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rclone-poc-pubblici-per-lo-sfruttamento-delle-cve-2026-88018-cve-2026-88044-cve-2026-88045-cve-2026-88016-e-cve-2026-88017", "content": "Disponibili Proof of Concept (PoC) per le CVE-2026-88018, CVE-2026-88044, CVE-2026-88045, CVE-2026-88016 e CVE-2026-88017 - gi\u00e0 sanate dal vendor - presenti in Rclone.", "creation_timestamp": "2026-09-11T16:00:46.790487Z"}, {"uuid": "e06061a8-f5fe-419b-a17a-569d0376d8e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88044", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvbaepjp3z2z", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88044: rclone is a command-line program to sync files and directories to and from different cloud storage providers\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-88044\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T18:52:17.807590Z"}, {"uuid": "2f13ea8c-15f9-4ca8-8e69-907aa635b774", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88044", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rclone-poc-pubblici-per-lo-sfruttamento-delle-cve-2026-88018-cve-2026-88044-cve-2026-88045-cve-2026-88016-e-cve-2026-88017", "content": "Disponibili Proof of Concept (PoC) per le CVE-2026-88018, CVE-2026-88044, CVE-2026-88045, CVE-2026-88016 e CVE-2026-88017 - gi\u00e0 sanate dal vendor - presenti in Rclone.", "creation_timestamp": "2026-09-12T01:00:39.546069Z"}, {"uuid": "6c3b853e-da06-46c3-bf24-89c1beb3df4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88045", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rclone-poc-pubblici-per-lo-sfruttamento-delle-cve-2026-88018-cve-2026-88044-cve-2026-88045-cve-2026-88016-e-cve-2026-88017", "content": "Disponibili Proof of Concept (PoC) per le CVE-2026-88018, CVE-2026-88044, CVE-2026-88045, CVE-2026-88016 e CVE-2026-88017 - gi\u00e0 sanate dal vendor - presenti in Rclone.", "creation_timestamp": "2026-09-12T01:00:39.593484Z"}, {"uuid": "2ceca487-f773-4493-8710-0ebac5cd976f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88044", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvh6t7v4za2t", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88044: rclone is a command-line program to sync files and directories to and from different cloud storage providers\nCVSS 9.1 \u00b7 EPSS 0.5%\nhttps://beta.vulnsea.com/cve/CVE-2026-88044\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-14T03:40:35.673410Z"}]}