https://vulnerability.circl.lu/sightings/feed 2026-08-21T23:27:49.525604+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/a3f4c04f-3fc5-481d-b2dd-2f5b4a948ab2/export 2026-08-21T23:27:49.549907+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a3f4c04f-3fc5-481d-b2dd-2f5b4a948ab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47187", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtikxlumky2j", "content": "CVE-2026-47187 - sshfs-fuse\nA security issue in the Debian Linux package manager allows attackers to execute malicious code on a server without being authenticated. This could lead to unauthorized\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sshfsfuse #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-08-20T06:00:03.973894Z"} 2026-08-20T06:00:03.973894+00:00 https://vulnerability.circl.lu/sighting/f0c4b32d-6ecf-433f-9b58-4a693c41328b/export 2026-08-21T23:27:49.553321+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f0c4b32d-6ecf-433f-9b58-4a693c41328b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47187", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthexp7taa2t", "content": "CVE-2026-47187\nSSHFS, a network filesystem client, allows a malicious SFTP server to access and modify local files on the client machine if the server returns certain types of symlinks. This issue can be exploited by\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-19T18:40:05.264782Z"} 2026-08-19T18:40:05.264782+00:00 https://vulnerability.circl.lu/sighting/bf916072-ac6e-4305-bd37-80c4606dc890/export 2026-08-21T23:27:49.553457+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "bf916072-ac6e-4305-bd37-80c4606dc890", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47187", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mth4mofmdt2j", "content": "\ud83d\udea8 CVE-2026-47187 \u2014 CVSS 9.3 CRITICAL\n\nSSHFS is a network filesystem client for connecting to SSH servers. Prior to version 3.7.6, a rogue SFTP se...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-47187\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T16:10:45.411609Z"} 2026-08-19T16:10:45.411609+00:00 https://vulnerability.circl.lu/sighting/49babe28-0d2f-41c2-82c6-44e8ef6b3054/export 2026-08-21T23:27:49.553595+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "49babe28-0d2f-41c2-82c6-44e8ef6b3054", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47187", "type": "seen", "source": "https://bsky.app/profile/evirus.bsky.social/post/3mo734wrr2c2x", "content": "I updated sshfs to 3.7.6-bp160.1.1 on Leap 16 and all my symlinks that traversed folders on remote machines broke. Looks like this is a deliberate change to fix CVE-2026-47187 symlink escape shenanigans. Adding follow_symlinks after -o restores the old behavior.", "creation_timestamp": "2026-06-13T20:17:04.767870Z"} 2026-06-13T20:17:04.767870+00:00 https://vulnerability.circl.lu/sighting/bfaaf389-63e5-4dfc-8c6c-335888707482/export 2026-08-21T23:27:49.553696+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "bfaaf389-63e5-4dfc-8c6c-335888707482", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47187", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mn34f42qcq2r", "content": "CVE-2026-47187, CVE-2026-48711: sshfs", "creation_timestamp": "2026-05-30T13:03:24.621529Z"} 2026-05-30T13:03:24.621529+00:00 https://vulnerability.circl.lu/sighting/ec3a706b-0d64-4703-aafe-2d118ef8d8ae/export 2026-08-21T23:27:49.553805+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ec3a706b-0d64-4703-aafe-2d118ef8d8ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47187", "type": "seen", "source": "https://infosec.exchange/users/harrysintonen/statuses/116663533676457323", "content": "CVE-2026-47187: Symlink escape - rogue SFTP server -> local file read/writeSeverity: Critical (CVSS 9.3, CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N)CWE: CWE-59 (Improper Link Resolution Before File Access)\nA rogue SFTP server can return symlink targets (absolute paths or relative \"../../../\" escapes) that sshfs passes to the kernel unchanged. The kernel resolves them on the client's local filesystem, so an ordinary \"cp\" through the mountpoint can read local files back to the server or write server-controlled bytes to local files. transform_symlinks does not cover relative targets.\nhttps://www.openwall.com/lists/oss-security/2026/05/30/3\n#CVE_2026_47187", "creation_timestamp": "2026-05-30T12:30:53.342192Z"} 2026-05-30T12:30:53.342192+00:00