https://vulnerability.circl.lu/sightings/feed 2026-07-23T17:58:29.767446+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/f9b2f55b-3b97-4454-96c5-4aa063a4fb58/export 2026-07-23T17:58:29.795140+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f9b2f55b-3b97-4454-96c5-4aa063a4fb58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3mrdbfljdmi25", "content": "RefluXFS: Local Privilege Escalation via XFS reflink direct-I/O race\n(CVE-2026-64600)\n\n\n www.openwall.com -> \n\nMythos writes Qualys advisories now FML :P\n\n\nOriginal->", "creation_timestamp": "2026-07-23T16:35:13.947466Z"} 2026-07-23T16:35:13.947466+00:00 https://vulnerability.circl.lu/sighting/a421ce0f-a3c2-4f82-b9a1-c6c01dffc40e/export 2026-07-23T17:58:29.797330+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a421ce0f-a3c2-4f82-b9a1-c6c01dffc40e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mrdahmeyxf2n", "content": "RefluXFS (CVE-2026-64600), a stealthy 9-year-old Linux kernel flaw, lets attackers gain root privileges on 16.4M+ systems. What's truly groundbreaking is that AI played a key role in its discovery.\n\nhttps://www.tpp.blog/1enq8y8\n\n#AI #refluxfs #linuxkernel", "creation_timestamp": "2026-07-23T16:18:28.691958Z"} 2026-07-23T16:18:28.691958+00:00 https://vulnerability.circl.lu/sighting/b414853c-0b1b-436b-b6ad-d59d637e66ab/export 2026-07-23T17:58:29.797469+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b414853c-0b1b-436b-b6ad-d59d637e66ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mrd7lrsuma22", "content": "RefluXFS (CVE-2026-64600): a 9-year-old Linux kernel flaw lets any local user overwrite root-owned files and take over the box. No workaround.\n\nHits default RHEL, Rocky, Alma and Amazon Linux.\n\nFix: patch the kernel and reboot.", "creation_timestamp": "2026-07-23T16:02:55.191958Z"} 2026-07-23T16:02:55.191958+00:00 https://vulnerability.circl.lu/sighting/eaf0329e-72f5-4df3-8aff-a9daa89eb6a8/export 2026-07-23T17:58:29.797580+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "eaf0329e-72f5-4df3-8aff-a9daa89eb6a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/chrisdemars.net/post/3mrd6wy47wk2q", "content": "\ud83d\udea8 Tune in to The Weak Link today at 2 PM EST. We are going to cover a new exploit that surfaced, \"RefluXFS (CVE-2026-64600) XFS Root Flaw on RHEL Explained\".\n\ntuxcare.com/webinars/the...\n\n#DeveloperCommunity #DevSecOps", "creation_timestamp": "2026-07-23T15:51:17.459685Z"} 2026-07-23T15:51:17.459685+00:00 https://vulnerability.circl.lu/sighting/8db0110b-958f-44eb-9d12-5c602e0ad13e/export 2026-07-23T17:58:29.797679+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "8db0110b-958f-44eb-9d12-5c602e0ad13e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://infosec.exchange/users/decio/statuses/116969900131286272", "content": "[VULN] \"Une faille dans le syst\u00e8me de fichiers XFS permet de prendre le contr\u00f4le d'une machine Linux\" CVE-2026-64600\ud83d\udc47 https://www.numerama.com/cyberguerre/2299983-refluxfs-la-faille-linux-qui-contourne-toutes-vos-protections-dort-depuis-2017-et-claude-mythos-la-trouvee.html\n\ud83d\udcac \u2b07\ufe0f https://infosec.pub/post/49886817\n#CyberVeille #Linux #XFS", "creation_timestamp": "2026-07-23T15:03:53.466839Z"} 2026-07-23T15:03:53.466839+00:00 https://vulnerability.circl.lu/sighting/4f579dbb-faa8-40b9-9bf8-4978c067c1b1/export 2026-07-23T17:58:29.797780+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4f579dbb-faa8-40b9-9bf8-4978c067c1b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrd2easkqs2l", "content": "XFS\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u306b9\u5e74\u524d\u306e\u7af6\u5408\u72b6\u614b\u306e\u8106\u5f31\u6027(CVE-2026-64600)\u304c\u3042\u308a\u3001\u30ed\u30fc\u30ab\u30eb\u653b\u6483\u8005\u306b\u3088\u308a\u4fdd\u8b77\u3055\u308c\u305f\u30d5\u30a1\u30a4\u30eb\u3092\u4e0a\u66f8\u304d\u3055\u308c\u3001root\u6a29\u9650\u3092\u596a\u53d6\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002", "creation_timestamp": "2026-07-23T14:29:13.418018Z"} 2026-07-23T14:29:13.418018+00:00 https://vulnerability.circl.lu/sighting/d9322790-190b-46a9-a54c-99579099eb35/export 2026-07-23T17:58:29.797878+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d9322790-190b-46a9-a54c-99579099eb35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "Telegram/G7gh6nD4vTBaBHsx84JyRO9Z4uQ4qfzwao91GpvkL8WyWQ", "content": "", "creation_timestamp": "2026-07-23T14:00:03.781497Z"} 2026-07-23T14:00:03.781497+00:00 https://vulnerability.circl.lu/sighting/b05f4323-142b-4212-a3f2-b072d52111de/export 2026-07-23T17:58:29.797970+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b05f4323-142b-4212-a3f2-b072d52111de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/tmgibs.bsky.social/post/3mrcxjmnntk2t", "content": "Qualys disclosed \u201cRefluXFS\u201d (CVE-2026-64600) on Tuesday, a race condition in the Linux kernel\u2019s XFS filesystem present since 2017\n\nThe flaw lets any unprivileged local user silently overwrite protected files to gain root access, bypassing SELinux and leaving no kernel logs", "creation_timestamp": "2026-07-23T13:38:34.432849Z"} 2026-07-23T13:38:34.432849+00:00 https://vulnerability.circl.lu/sighting/39014a72-104f-44ad-a666-e5029070d348/export 2026-07-23T17:58:29.798063+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "39014a72-104f-44ad-a666-e5029070d348", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/techoverload.bsky.social/post/3mrcx6v4thy2p", "content": "RefluXFS (CVE-2026-64600): a 9-year-old XFS race condition in the Linux kernel lets any local user get root by racing O_DIRECT writes on a reflinked file. Affects ~16M RHEL/enterprise systems. Patch your kernel and reboot\u2014don't sit on this one. \ud83d\udee1\ufe0f\n\n#Linux #Security #Cybersecurity", "creation_timestamp": "2026-07-23T13:32:32.049982Z"} 2026-07-23T13:32:32.049982+00:00 https://vulnerability.circl.lu/sighting/fea1ba30-34f7-4747-9a65-9b3450b56945/export 2026-07-23T17:58:29.798162+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "fea1ba30-34f7-4747-9a65-9b3450b56945", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://thehackernews.com/2026/07/nine-year-old-refluxfs-linux-flaw-gives.html", "content": "RefluXFS, a new Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local user overwrite root-owned files on an XFS filesystem and gain persistent root access.\n\nQualys said default installations of Red Hat Enterprise Linux and its derivatives, Fedora Server, and Amazon Linux can meet the conditions for exploitation.\n\nThe company demonstrated the race", "creation_timestamp": "2026-07-23T13:01:02.899570Z"} 2026-07-23T13:01:02.899570+00:00