{"uuid": "3bd85463-e8be-4b4f-89d6-ea4bddc0c3d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14863", "type": "seen", "source": "https://infosec.exchange/users/catc0n/statuses/117097018446805721", "content": "New vulnerability disclosure from @chocapikk_:\nCVE-2026-14863 is an OS command injection-to-RCE in FileRun, a commercial self-hosted file manager. Internet footprint is an appreciable 3.5K or so based on the team's ASM queries. Good stuff as always from Valentin. \nhttps://www.vulncheck.com/blog/filerun-thumbnail-command-injection-rce", "creation_timestamp": "2026-08-15T01:51:48.148784Z"}