{"vulnerability": "CVE-2026-88018", "sightings": [{"uuid": "74a33594-eba0-402b-8465-33bc585b5f5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88018", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv6lcu5vv52j", "content": "CVE-2026-88018 - rclone\nIf you use rclone\u2019s S3 server feature with the auth-proxy option but forget to set an auth-key, an attacker on the network can pretend to be any user and gain access to the storage backend.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rclone #CVE #infosec", "creation_timestamp": "2026-09-10T17:30:08.090263Z"}, {"uuid": "951a1308-b429-4585-b971-794150ce3555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88018", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv6nhoohgn2n", "content": "\ud83d\udea8 CVE-2026-88018 \u2014 CVSS 9.8 CRITICAL\n\nrclone is a command-line program to sync files and directories to and from different cloud storage provider...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-88018\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T18:08:36.893464Z"}, {"uuid": "eae7a52d-256a-4150-ae27-e9b22971a62b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88018", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mv6lu5v56m2q", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88018: rclone is a command-line program to sync files and directories to and from different cloud storage providers\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-88018\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-10T17:39:48.385130Z"}, {"uuid": "8b7491fc-c03e-4f17-aa43-25b94ca62453", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88018", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mv6st3zh5y2w", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88018: rclone is a command-line program to sync files and directories to and from different cloud storage providers\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-88018\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-10T19:44:29.022192Z"}, {"uuid": "70fefdae-35be-46f1-b8cb-db18afa3d116", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-88018", "type": "published-proof-of-concept", "source": "https://github.com/rclone/rclone/security/advisories/GHSA-xwwr-4h3p-r22c", "content": "", "creation_timestamp": "2026-09-11T00:35:18.890159Z"}, {"uuid": "46e6541a-8529-4fe0-8c37-c091f0ff0754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88018", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mv7p57om4v2p", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88018: rclone is a command-line program to sync files and directories to and from different cloud storage providers\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-88018\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T04:11:12.846442Z"}, {"uuid": "eb586ebf-6a92-402e-a680-cf18b73cb457", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88018", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mv7wdg6ps62t", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88018: rclone is a command-line program to sync files and directories to and from different cloud storage providers\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-88018\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T06:19:57.562891Z"}, {"uuid": "48596761-6ab8-4235-a605-9d88c5aba386", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88018", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvaat5dll52i", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88018: rclone is a command-line program to sync files and directories to and from different cloud storage providers\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-88018\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T09:27:43.146807Z"}, {"uuid": "20a620e6-653a-4792-a41c-856bb2093bd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88018", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvaegtg4xj24", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88018: rclone is a command-line program to sync files and directories to and from different cloud storage providers\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-88018\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T10:32:25.326763Z"}, {"uuid": "4ddd6920-1c23-4c54-9377-8d63f669ec40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88018", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvahz4oxwm2p", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88018: rclone serve s3: --auth-proxy without --auth-key authenticates nobody - full SigV4 signature bypass\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-88018\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T11:36:20.939779Z"}, {"uuid": "cc0f9f07-ccb2-4620-b111-2e29d46c1169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88018", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvasjldgwl24", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88018: rclone serve s3: --auth-proxy without --auth-key authenticates nobody - full SigV4 signature bypass\nCVSS 9.8 \u00b7 EPSS 0.5%\nhttps://beta.vulnsea.com/cve/CVE-2026-88018\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T14:44:28.802569Z"}, {"uuid": "38541749-3229-4cd9-9786-90552fa55be5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88018", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rclone-poc-pubblici-per-lo-sfruttamento-delle-cve-2026-88018-cve-2026-88044-cve-2026-88045-cve-2026-88016-e-cve-2026-88017", "content": "Disponibili Proof of Concept (PoC) per le CVE-2026-88018, CVE-2026-88044, CVE-2026-88045, CVE-2026-88016 e CVE-2026-88017 - gi\u00e0 sanate dal vendor - presenti in Rclone.", "creation_timestamp": "2026-09-11T16:00:46.674719Z"}, {"uuid": "2e49dffc-3e9f-4ea2-b964-1e7736faa475", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88018", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvbaem7saz2u", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88018: rclone is a command-line program to sync files and directories to and from different cloud storage providers\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-88018\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T18:52:14.321181Z"}, {"uuid": "0bef2f08-e96b-49ac-88fa-562e1ee65d21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88018", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rclone-poc-pubblici-per-lo-sfruttamento-delle-cve-2026-88018-cve-2026-88044-cve-2026-88045-cve-2026-88016-e-cve-2026-88017", "content": "Disponibili Proof of Concept (PoC) per le CVE-2026-88018, CVE-2026-88044, CVE-2026-88045, CVE-2026-88016 e CVE-2026-88017 - gi\u00e0 sanate dal vendor - presenti in Rclone.", "creation_timestamp": "2026-09-12T01:00:39.496395Z"}, {"uuid": "d4f6e64f-baa5-488f-b4ab-cdad6b580431", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88018", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvbyx4w3bp2w", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88018: rclone is a command-line program to sync files and directories to and from different cloud storage providers\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-88018\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-12T02:12:13.116188Z"}, {"uuid": "7332ab66-4bb7-411c-8f22-6b1b95b86b2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88018", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvcdahgke52u", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88018: rclone is a command-line program to sync files and directories to and from different cloud storage providers\nCVSS 9.8 \u00b7 EPSS 0.5%\nhttps://beta.vulnsea.com/cve/CVE-2026-88018\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-12T05:16:16.257154Z"}, {"uuid": "7f884830-ec0f-4091-b442-abc5a803ab92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88018", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvco2frk742t", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88018: rclone is a command-line program to sync files and directories to and from different cloud storage providers\nCVSS 9.8 \u00b7 EPSS 0.5%\nhttps://beta.vulnsea.com/cve/CVE-2026-88018\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-12T08:29:44.358920Z"}, {"uuid": "dfa647a2-5c9a-4768-aa2e-88d2e182d7b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88018", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvd43k2jpm2z", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88018: rclone is a command-line program to sync files and directories to and from different cloud storage providers\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-88018\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-12T12:40:55.252203Z"}, {"uuid": "81f3f793-7fa2-4ab6-a4e1-600df088ee92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88018", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvdnneqqgg2u", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-88018: rclone is a command-line program to sync files and directories to and from different cloud storage providers\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-88018\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-12T17:55:06.632863Z"}]}