{"metadata": {"vulnerability": "CVE-2026-55183", "count": 12, "kinds": {"milestone": 3, "sighting": 3, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-06-16T15:20:43.086Z", "date_only": false, "value": "2026-06-16T15:20:43.086Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-55183", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T16:19:53.382Z", "date_only": false, "value": "2026-10-13T16:19:53.382Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-55183", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T16:19:53.382Z", "date_only": false, "value": "2026-10-13T16:19:53.382Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-55183", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T16:46:02.905Z", "date_only": false, "value": "2026-10-13T16:46:02.905202Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117434611282850967", "record": "CVE-2026-55183", "field": "creation_timestamp", "uuid": "99a50960-6a66-4dc8-9b7f-4f55ce42fb0c", "content": "CVE-2026-55183 RClone Manager: Unauthenticated RClone Daemon Enables Remote Attack via Malicious Web Page RClone Manager is a cross-platform GUI application designed to help users manage Rclone remotes efficiently. Prior to 0.2.7, RClone Manager starts the local rclone rcd service on 127.0.0.1:51900 with --rc-no-auth, --rc-allow-origin *, and --rc-serve. A malicious web page opened by a user while the daemon is running can therefore send cross-origin requests to the unauthenticated local API with the user's operating-system privileges. The requests can disclose configured storage credentials and potentially access, upload, modify, or exfiltrate locally stored files accessible to the user and files available through configured remotes; the advisory's possible command-execution impact remains unconfirmed. This issue is fixed in version 0.2.7.\nhttps://www.cve.org/CVERecord?id=CVE-2026-55183https://github.com/Zarestia-Dev/rclone-manager/security/advisories/GHSA-f3qj-7hx5-q4c8https://github.com/Zarestia-Dev/rclone-manager/commit/daa379498fc1aac453bcf1864d7ea072b80ffbe8https://github.com/Zarestia-Dev/rclone-manager/releases/tag/v0.2.7#Zarestia-Dev #rclone-manager#CVE_2026_55183#bot", "url": "https://infosec.exchange/users/cve/statuses/117434611282850967"}, {"timestamp": "2026-10-13T17:13:06.546Z", "date_only": false, "value": "2026-10-13T17:13:06.546520Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-55183", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-13T17:13:06.546Z", "date_only": false, "value": "2026-10-13T17:13:06.546520Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-55183", "record": "FKIE_CVE-2026-55183", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-13T17:13:34.078Z", "date_only": false, "value": "2026-10-13T17:13:34.078Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-55183", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-13T17:13:34.078Z", "date_only": false, "value": "2026-10-13T17:13:34.078Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-55183", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T17:17:41.893Z", "date_only": false, "value": "2026-10-13T17:17:41.893", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-55183", "record": "FKIE_CVE-2026-55183", "field": "published"}, {"timestamp": "2026-10-13T18:08:50.981Z", "date_only": false, "value": "2026-10-13T18:08:50.981535Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxrmuib7fd2l", "record": "CVE-2026-55183", "field": "creation_timestamp", "uuid": "4dde0596-768f-4ae4-9e4a-63aa93a1f0c4", "content": "\ud83d\udea8 CVE-2026-55183 \u2014 CVSS 9.6 CRITICAL\n\nRClone Manager is a cross-platform GUI application designed to help users manage Rclone remotes efficiently...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-55183\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxrmuib7fd2l"}, {"timestamp": "2026-10-13T21:30:06.702Z", "date_only": false, "value": "2026-10-13T21:30:06.702032Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxry4ekc3227", "record": "CVE-2026-55183", "field": "creation_timestamp", "uuid": "838b7186-8ea5-4c74-8c13-f790c979ea4e", "content": "CVE-2026-55183 - rclone-manager\nBefore version 0.2.7, RClone Manager runs a local service that accepts commands from any web page without requiring a password. If a user visits a malicious site\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rclonemanager #zarestiadev #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxry4ekc3227"}, {"timestamp": "2026-10-16T20:04:29.760Z", "date_only": false, "value": "2026-10-16T20:04:29.760", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-55183", "record": "FKIE_CVE-2026-55183", "field": "lastModified"}]}