https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 23 Jul 2026 17:58:29 +0000 https://vulnerability.circl.lu/sighting/f9b2f55b-3b97-4454-96c5-4aa063a4fb58/export {"uuid": "f9b2f55b-3b97-4454-96c5-4aa063a4fb58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3mrdbfljdmi25", "content": "RefluXFS: Local Privilege Escalation via XFS reflink direct-I/O race\n(CVE-2026-64600)\n\n\n www.openwall.com -> \n\nMythos writes Qualys advisories now FML :P\n\n\nOriginal->", "creation_timestamp": "2026-07-23T16:35:13.947466Z"} {"uuid": "f9b2f55b-3b97-4454-96c5-4aa063a4fb58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3mrdbfljdmi25", "content": "RefluXFS: Local Privilege Escalation via XFS reflink direct-I/O race\n(CVE-2026-64600)\n\n\n www.openwall.com -> \n\nMythos writes Qualys advisories now FML :P\n\n\nOriginal->", "creation_timestamp": "2026-07-23T16:35:13.947466Z"} https://vulnerability.circl.lu/sighting/f9b2f55b-3b97-4454-96c5-4aa063a4fb58/export Thu, 23 Jul 2026 16:35:13 +0000 https://vulnerability.circl.lu/sighting/a421ce0f-a3c2-4f82-b9a1-c6c01dffc40e/export {"uuid": "a421ce0f-a3c2-4f82-b9a1-c6c01dffc40e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mrdahmeyxf2n", "content": "RefluXFS (CVE-2026-64600), a stealthy 9-year-old Linux kernel flaw, lets attackers gain root privileges on 16.4M+ systems. What's truly groundbreaking is that AI played a key role in its discovery.\n\nhttps://www.tpp.blog/1enq8y8\n\n#AI #refluxfs #linuxkernel", "creation_timestamp": "2026-07-23T16:18:28.691958Z"} {"uuid": "a421ce0f-a3c2-4f82-b9a1-c6c01dffc40e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mrdahmeyxf2n", "content": "RefluXFS (CVE-2026-64600), a stealthy 9-year-old Linux kernel flaw, lets attackers gain root privileges on 16.4M+ systems. What's truly groundbreaking is that AI played a key role in its discovery.\n\nhttps://www.tpp.blog/1enq8y8\n\n#AI #refluxfs #linuxkernel", "creation_timestamp": "2026-07-23T16:18:28.691958Z"} https://vulnerability.circl.lu/sighting/a421ce0f-a3c2-4f82-b9a1-c6c01dffc40e/export Thu, 23 Jul 2026 16:18:28 +0000 https://vulnerability.circl.lu/sighting/b414853c-0b1b-436b-b6ad-d59d637e66ab/export {"uuid": "b414853c-0b1b-436b-b6ad-d59d637e66ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mrd7lrsuma22", "content": "RefluXFS (CVE-2026-64600): a 9-year-old Linux kernel flaw lets any local user overwrite root-owned files and take over the box. No workaround.\n\nHits default RHEL, Rocky, Alma and Amazon Linux.\n\nFix: patch the kernel and reboot.", "creation_timestamp": "2026-07-23T16:02:55.191958Z"} {"uuid": "b414853c-0b1b-436b-b6ad-d59d637e66ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mrd7lrsuma22", "content": "RefluXFS (CVE-2026-64600): a 9-year-old Linux kernel flaw lets any local user overwrite root-owned files and take over the box. No workaround.\n\nHits default RHEL, Rocky, Alma and Amazon Linux.\n\nFix: patch the kernel and reboot.", "creation_timestamp": "2026-07-23T16:02:55.191958Z"} https://vulnerability.circl.lu/sighting/b414853c-0b1b-436b-b6ad-d59d637e66ab/export Thu, 23 Jul 2026 16:02:55 +0000 https://vulnerability.circl.lu/sighting/eaf0329e-72f5-4df3-8aff-a9daa89eb6a8/export {"uuid": "eaf0329e-72f5-4df3-8aff-a9daa89eb6a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/chrisdemars.net/post/3mrd6wy47wk2q", "content": "\ud83d\udea8 Tune in to The Weak Link today at 2 PM EST. We are going to cover a new exploit that surfaced, \"RefluXFS (CVE-2026-64600) XFS Root Flaw on RHEL Explained\".\n\ntuxcare.com/webinars/the...\n\n#DeveloperCommunity #DevSecOps", "creation_timestamp": "2026-07-23T15:51:17.459685Z"} {"uuid": "eaf0329e-72f5-4df3-8aff-a9daa89eb6a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/chrisdemars.net/post/3mrd6wy47wk2q", "content": "\ud83d\udea8 Tune in to The Weak Link today at 2 PM EST. We are going to cover a new exploit that surfaced, \"RefluXFS (CVE-2026-64600) XFS Root Flaw on RHEL Explained\".\n\ntuxcare.com/webinars/the...\n\n#DeveloperCommunity #DevSecOps", "creation_timestamp": "2026-07-23T15:51:17.459685Z"} https://vulnerability.circl.lu/sighting/eaf0329e-72f5-4df3-8aff-a9daa89eb6a8/export Thu, 23 Jul 2026 15:51:17 +0000 https://vulnerability.circl.lu/sighting/8db0110b-958f-44eb-9d12-5c602e0ad13e/export {"uuid": "8db0110b-958f-44eb-9d12-5c602e0ad13e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://infosec.exchange/users/decio/statuses/116969900131286272", "content": "[VULN] \"Une faille dans le syst\u00e8me de fichiers XFS permet de prendre le contr\u00f4le d'une machine Linux\" CVE-2026-64600\ud83d\udc47 https://www.numerama.com/cyberguerre/2299983-refluxfs-la-faille-linux-qui-contourne-toutes-vos-protections-dort-depuis-2017-et-claude-mythos-la-trouvee.html\n\ud83d\udcac \u2b07\ufe0f https://infosec.pub/post/49886817\n#CyberVeille #Linux #XFS", "creation_timestamp": "2026-07-23T15:03:53.466839Z"} {"uuid": "8db0110b-958f-44eb-9d12-5c602e0ad13e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://infosec.exchange/users/decio/statuses/116969900131286272", "content": "[VULN] \"Une faille dans le syst\u00e8me de fichiers XFS permet de prendre le contr\u00f4le d'une machine Linux\" CVE-2026-64600\ud83d\udc47 https://www.numerama.com/cyberguerre/2299983-refluxfs-la-faille-linux-qui-contourne-toutes-vos-protections-dort-depuis-2017-et-claude-mythos-la-trouvee.html\n\ud83d\udcac \u2b07\ufe0f https://infosec.pub/post/49886817\n#CyberVeille #Linux #XFS", "creation_timestamp": "2026-07-23T15:03:53.466839Z"} https://vulnerability.circl.lu/sighting/8db0110b-958f-44eb-9d12-5c602e0ad13e/export Thu, 23 Jul 2026 15:03:53 +0000 https://vulnerability.circl.lu/sighting/4f579dbb-faa8-40b9-9bf8-4978c067c1b1/export {"uuid": "4f579dbb-faa8-40b9-9bf8-4978c067c1b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrd2easkqs2l", "content": "XFS\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u306b9\u5e74\u524d\u306e\u7af6\u5408\u72b6\u614b\u306e\u8106\u5f31\u6027(CVE-2026-64600)\u304c\u3042\u308a\u3001\u30ed\u30fc\u30ab\u30eb\u653b\u6483\u8005\u306b\u3088\u308a\u4fdd\u8b77\u3055\u308c\u305f\u30d5\u30a1\u30a4\u30eb\u3092\u4e0a\u66f8\u304d\u3055\u308c\u3001root\u6a29\u9650\u3092\u596a\u53d6\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002", "creation_timestamp": "2026-07-23T14:29:13.418018Z"} {"uuid": "4f579dbb-faa8-40b9-9bf8-4978c067c1b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrd2easkqs2l", "content": "XFS\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u306b9\u5e74\u524d\u306e\u7af6\u5408\u72b6\u614b\u306e\u8106\u5f31\u6027(CVE-2026-64600)\u304c\u3042\u308a\u3001\u30ed\u30fc\u30ab\u30eb\u653b\u6483\u8005\u306b\u3088\u308a\u4fdd\u8b77\u3055\u308c\u305f\u30d5\u30a1\u30a4\u30eb\u3092\u4e0a\u66f8\u304d\u3055\u308c\u3001root\u6a29\u9650\u3092\u596a\u53d6\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002", "creation_timestamp": "2026-07-23T14:29:13.418018Z"} https://vulnerability.circl.lu/sighting/4f579dbb-faa8-40b9-9bf8-4978c067c1b1/export Thu, 23 Jul 2026 14:29:13 +0000 https://vulnerability.circl.lu/sighting/d9322790-190b-46a9-a54c-99579099eb35/export {"uuid": "d9322790-190b-46a9-a54c-99579099eb35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "Telegram/G7gh6nD4vTBaBHsx84JyRO9Z4uQ4qfzwao91GpvkL8WyWQ", "content": "", "creation_timestamp": "2026-07-23T14:00:03.781497Z"} {"uuid": "d9322790-190b-46a9-a54c-99579099eb35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "Telegram/G7gh6nD4vTBaBHsx84JyRO9Z4uQ4qfzwao91GpvkL8WyWQ", "content": "", "creation_timestamp": "2026-07-23T14:00:03.781497Z"} https://vulnerability.circl.lu/sighting/d9322790-190b-46a9-a54c-99579099eb35/export Thu, 23 Jul 2026 14:00:03 +0000 https://vulnerability.circl.lu/sighting/b05f4323-142b-4212-a3f2-b072d52111de/export {"uuid": "b05f4323-142b-4212-a3f2-b072d52111de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/tmgibs.bsky.social/post/3mrcxjmnntk2t", "content": "Qualys disclosed \u201cRefluXFS\u201d (CVE-2026-64600) on Tuesday, a race condition in the Linux kernel\u2019s XFS filesystem present since 2017\n\nThe flaw lets any unprivileged local user silently overwrite protected files to gain root access, bypassing SELinux and leaving no kernel logs", "creation_timestamp": "2026-07-23T13:38:34.432849Z"} {"uuid": "b05f4323-142b-4212-a3f2-b072d52111de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/tmgibs.bsky.social/post/3mrcxjmnntk2t", "content": "Qualys disclosed \u201cRefluXFS\u201d (CVE-2026-64600) on Tuesday, a race condition in the Linux kernel\u2019s XFS filesystem present since 2017\n\nThe flaw lets any unprivileged local user silently overwrite protected files to gain root access, bypassing SELinux and leaving no kernel logs", "creation_timestamp": "2026-07-23T13:38:34.432849Z"} https://vulnerability.circl.lu/sighting/b05f4323-142b-4212-a3f2-b072d52111de/export Thu, 23 Jul 2026 13:38:34 +0000 https://vulnerability.circl.lu/sighting/39014a72-104f-44ad-a666-e5029070d348/export {"uuid": "39014a72-104f-44ad-a666-e5029070d348", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/techoverload.bsky.social/post/3mrcx6v4thy2p", "content": "RefluXFS (CVE-2026-64600): a 9-year-old XFS race condition in the Linux kernel lets any local user get root by racing O_DIRECT writes on a reflinked file. Affects ~16M RHEL/enterprise systems. Patch your kernel and reboot\u2014don't sit on this one. \ud83d\udee1\ufe0f\n\n#Linux #Security #Cybersecurity", "creation_timestamp": "2026-07-23T13:32:32.049982Z"} {"uuid": "39014a72-104f-44ad-a666-e5029070d348", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://bsky.app/profile/techoverload.bsky.social/post/3mrcx6v4thy2p", "content": "RefluXFS (CVE-2026-64600): a 9-year-old XFS race condition in the Linux kernel lets any local user get root by racing O_DIRECT writes on a reflinked file. Affects ~16M RHEL/enterprise systems. Patch your kernel and reboot\u2014don't sit on this one. \ud83d\udee1\ufe0f\n\n#Linux #Security #Cybersecurity", "creation_timestamp": "2026-07-23T13:32:32.049982Z"} https://vulnerability.circl.lu/sighting/39014a72-104f-44ad-a666-e5029070d348/export Thu, 23 Jul 2026 13:32:32 +0000 https://vulnerability.circl.lu/sighting/fea1ba30-34f7-4747-9a65-9b3450b56945/export {"uuid": "fea1ba30-34f7-4747-9a65-9b3450b56945", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://thehackernews.com/2026/07/nine-year-old-refluxfs-linux-flaw-gives.html", "content": "RefluXFS, a new Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local user overwrite root-owned files on an XFS filesystem and gain persistent root access.\n\nQualys said default installations of Red Hat Enterprise Linux and its derivatives, Fedora Server, and Amazon Linux can meet the conditions for exploitation.\n\nThe company demonstrated the race", "creation_timestamp": "2026-07-23T13:01:02.899570Z"} {"uuid": "fea1ba30-34f7-4747-9a65-9b3450b56945", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64600", "type": "seen", "source": "https://thehackernews.com/2026/07/nine-year-old-refluxfs-linux-flaw-gives.html", "content": "RefluXFS, a new Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local user overwrite root-owned files on an XFS filesystem and gain persistent root access.\n\nQualys said default installations of Red Hat Enterprise Linux and its derivatives, Fedora Server, and Amazon Linux can meet the conditions for exploitation.\n\nThe company demonstrated the race", "creation_timestamp": "2026-07-23T13:01:02.899570Z"} https://vulnerability.circl.lu/sighting/fea1ba30-34f7-4747-9a65-9b3450b56945/export Thu, 23 Jul 2026 13:01:02 +0000