https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 14:01:55 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-12863 bdu:2026-12863 https://cve.radiocsirt.org/vuln/bdu:2026-12863 https://cve.radiocsirt.org/vuln/euvd-2026-357001 EUVD-2026-357001 https://cve.radiocsirt.org/vuln/euvd-2026-357001 https://cve.radiocsirt.org/vuln/fkie_cve-2026-47187 <p>SSHFS is a network filesystem client for connecting to SSH servers. Prior to version 3.7.6, a rogue SFTP server can return absolute symlink targets or relative targets containing parent-directory components that SSHFS passes through FUSE for resolution by the client kernel against the local filesystem. The documented transform_symlinks mitigation does not contain relative targets because transform_symlink() returns early at sshfs.c:2181, while sshfs_readlink() at sshfs.c:2234 to sshfs.c:2236 otherwise copies the server-supplied link target to the kernel. A victim or victim-side tool that follows such a link through ordinary operations such as cp, rsync, backup tooling, or an editor can disclose readable local files back to the server or write server-controlled content to writable local files, potentially including startup or scheduled-task files. This issue is fixed in version 3.7.6.</p> <p>SSHFS is a network filesystem client for connecting to SSH servers. Prior to version 3.7.6, a rogue SFTP server can return absolute symlink targets or relative targets containing parent-directory components that SSHFS passes through FUSE for resolution by the client kernel against the local filesystem. The documented transform_symlinks mitigation does not contain relative targets because transform_symlink() returns early at sshfs.c:2181, while sshfs_readlink() at sshfs.c:2234 to sshfs.c:2236 otherwise copies the server-supplied link target to the kernel. A victim or victim-side tool that follows such a link through ordinary operations such as cp, rsync, backup tooling, or an editor can disclose readable local files back to the server or write server-controlled content to writable local files, potentially including startup or scheduled-task files. This issue is fixed in version 3.7.6.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-47187 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10952-1 <p>sshfs-3.7.6-1.1 on GA media</p> <p>sshfs-3.7.6-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10952-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-47187 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: sshfs-fuse, Ubuntu:18.04:LTS: sshfs-fuse, Ubuntu:20.04:LTS: sshfs-fuse, Ubuntu:22.04:LTS: sshfs-fuse, Ubuntu:24.04:LTS: sshfs-fuse, Ubuntu:25.10: sshfs-fuse, Ubuntu:26.04:LTS: sshfs-fuse</p> <p>SSHFS is a network filesystem client for connecting to SSH servers. Prior to version 3.7.6, a rogue SFTP server can return absolute symlink targets or relative targets containing parent-directory components that SSHFS passes through FUSE for resolution by the client kernel against the local filesystem. The documented transform_symlinks mitigation does not contain relative targets because transform_symlink() returns early at sshfs.c:2181, while sshfs_readlink() at sshfs.c:2234 to sshfs.c:2236 otherwise copies the server-supplied link target to the kernel. A victim or victim-side tool that follows such a link through ordinary operations such as cp, rsync, backup tooling, or an editor can disclose readable local files back to the server or write server-controlled content to writable local files, potentially including startup or scheduled-task files. This issue is fixed in version 3.7.6.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: sshfs-fuse, Ubuntu:18.04:LTS: sshfs-fuse, Ubuntu:20.04:LTS: sshfs-fuse, Ubuntu:22.04:LTS: sshfs-fuse, Ubuntu:24.04:LTS: sshfs-fuse, Ubuntu:25.10: sshfs-fuse, Ubuntu:26.04:LTS: sshfs-fuse</p> <p>SSHFS is a network filesystem client for connecting to SSH servers. Prior to version 3.7.6, a rogue SFTP server can return absolute symlink targets or relative targets containing parent-directory components that SSHFS passes through FUSE for resolution by the client kernel against the local filesystem. The documented transform_symlinks mitigation does not contain relative targets because transform_symlink() returns early at sshfs.c:2181, while sshfs_readlink() at sshfs.c:2234 to sshfs.c:2236 otherwise copies the server-supplied link target to the kernel. A victim or victim-side tool that follows such a link through ordinary operations such as cp, rsync, backup tooling, or an editor can disclose readable local files back to the server or write server-controlled content to writable local files, potentially including startup or scheduled-task files. This issue is fixed in version 3.7.6.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-47187