{"vulnerability": "CVE-2026-97359", "sightings": [{"uuid": "48a8ad7a-849e-4350-9c2d-727e2ed44990", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97359", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwbh7yt5c42u", "content": "CVE-2026-97359 - hfs2\nVersions of HFS2 up to 2.4.0 let anyone upload a file with a specially crafted name that can cause the server to execute arbitrary commands. This can happen without any login, giving\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#hfs2 #rejetto #CVE #infosec", "creation_timestamp": "2026-09-24T14:20:07.560646Z"}, {"uuid": "51f2f810-8494-431e-88a4-8afbe8d81b80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97359", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwbhbf4hid27", "content": "\ud83d\udd34 CVE-2026-97359 - Critical (10)\n\nHFS2 version 2.4.0 and earlier contains a template injection vulnerability in the multipart uploa...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-97359/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-24T14:20:54.654921Z"}, {"uuid": "c161e6aa-30d6-43fd-a145-4ad1e5b317d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97359", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6sfnogdy77v4n", "content": "CVE-2026-97359 - HFS2 2.4.0 RCE via Multipart Upload Filename Template Injection\nCVE ID : CVE-2026-97359\n \n Published : Sept. 24, 2026, 1:28 p.m. | 55\u00a0minutes ago\n \n Description : HFS2 version 2.4.0 and earlier contains a template injection vulnerability in the multipart uploa...", "creation_timestamp": "2026-09-24T14:52:57.144547Z"}, {"uuid": "c1139b58-fca8-4796-bc45-23021e31e8ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97359", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwbn7ubp5m2u", "content": "\ud83d\udea8 CVE-2026-97359 \u2014 CVSS 10 CRITICAL\n\nHFS2 version 2.4.0 and earlier contains a template injection vulnerability in the multipart upload handler ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-97359\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-24T16:07:25.253351Z"}, {"uuid": "6f8ea8c1-b7a2-4af7-b702-9c9d0a5f0703", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97359", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117328526519382059", "content": "CVE-2026-97359 - Critical unauthenticated RCE in HFS2 (<= 2.4.0) via template injection in multipart uploads. CVSS 10.0. Mitigate immediately. #CVE #infosec #cybersecurity\nhttps://www.valtersit.com/cve/CVE-2026-97359/", "creation_timestamp": "2026-09-24T23:07:19.489149Z"}]}