https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 15:30:58 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-272831 EUVD-2026-272831 https://cve.radiocsirt.org/vuln/euvd-2026-272831 https://cve.radiocsirt.org/vuln/fkie_cve-2026-28296 <p>A flaw was found in the FTP GVfs backend. A remote attacker could exploit this input validation vulnerability by supplying specially crafted file paths containing carriage return and line feed (CRLF) sequences. These unsanitized sequences allow the attacker to terminate intended FTP commands and inject arbitrary FTP commands, potentially leading to arbitrary code execution or other severe impacts.</p> <p>A flaw was found in the FTP GVfs backend. A remote attacker could exploit this input validation vulnerability by supplying specially crafted file paths containing carriage return and line feed (CRLF) sequences. These unsanitized sequences allow the attacker to terminate intended FTP commands and inject arbitrary FTP commands, potentially leading to arbitrary code execution or other severe impacts.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-28296 https://cve.radiocsirt.org/vuln/ghsa-r8j5-pj3m-qhpv <p>A flaw was found in the FTP GVfs backend. A remote attacker could exploit this input validation vulnerability by supplying specially crafted file paths containing carriage return and line feed (CRLF) sequences. These unsanitized sequences allow the attacker to terminate intended FTP commands and inject arbitrary FTP commands, potentially leading to arbitrary code execution or other severe impacts.</p> <p>A flaw was found in the FTP GVfs backend. A remote attacker could exploit this input validation vulnerability by supplying specially crafted file paths containing carriage return and line feed (CRLF) sequences. These unsanitized sequences allow the attacker to terminate intended FTP commands and inject arbitrary FTP commands, potentially leading to arbitrary code execution or other severe impacts.</p> https://cve.radiocsirt.org/vuln/ghsa-r8j5-pj3m-qhpv https://cve.radiocsirt.org/vuln/oesa-2026-2570 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: gvfs</p> <p>Gvfs is a userspace virtual filesystem implementation for GIO (a library available in GLib). It comes with a set of backends, including trash support, SFTP, SMB, HTTP, DAV, and many others. Gvfs also contains modules for GIO that implement volume monitors and persistent metadata storage. Security Fix(es):</p> <p>A flaw was found in the FTP GVfs backend. A remote attacker could exploit this input validation vulnerability by supplying specially crafted file paths containing carriage return and line feed (CRLF) sequences. These unsanitized sequences allow the attacker to terminate intended FTP commands and inject arbitrary FTP commands, potentially leading to arbitrary code execution or other severe impacts.(CVE-2026-28296)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: gvfs</p> <p>Gvfs is a userspace virtual filesystem implementation for GIO (a library available in GLib). It comes with a set of backends, including trash support, SFTP, SMB, HTTP, DAV, and many others. Gvfs also contains modules for GIO that implement volume monitors and persistent metadata storage. Security Fix(es):</p> <p>A flaw was found in the FTP GVfs backend. A remote attacker could exploit this input validation vulnerability by supplying specially crafted file paths containing carriage return and line feed (CRLF) sequences. These unsanitized sequences allow the attacker to terminate intended FTP commands and inject arbitrary FTP commands, potentially leading to arbitrary code execution or other severe impacts.(CVE-2026-28296)</p> https://cve.radiocsirt.org/vuln/oesa-2026-2570 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10275-1 <p>gvfs-1.58.2-1.1 on GA media</p> <p>gvfs-1.58.2-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10275-1 https://cve.radiocsirt.org/vuln/suse-su-2026:0916-1 <p>Security update for gvfs</p> <p>Security update for gvfs</p> https://cve.radiocsirt.org/vuln/suse-su-2026:0916-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-28296 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: gvfs, Ubuntu:Pro:18.04:LTS: gvfs, Ubuntu:Pro:20.04:LTS: gvfs, Ubuntu:22.04:LTS: gvfs, Ubuntu:24.04:LTS: gvfs, Ubuntu:25.10: gvfs</p> <p>A flaw was found in the FTP GVfs backend. A remote attacker could exploit this input validation vulnerability by supplying specially crafted file paths containing carriage return and line feed (CRLF) sequences. These unsanitized sequences allow the attacker to terminate intended FTP commands and inject arbitrary FTP commands, potentially leading to arbitrary code execution or other severe impacts.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: gvfs, Ubuntu:Pro:18.04:LTS: gvfs, Ubuntu:Pro:20.04:LTS: gvfs, Ubuntu:22.04:LTS: gvfs, Ubuntu:24.04:LTS: gvfs, Ubuntu:25.10: gvfs</p> <p>A flaw was found in the FTP GVfs backend. A remote attacker could exploit this input validation vulnerability by supplying specially crafted file paths containing carriage return and line feed (CRLF) sequences. These unsanitized sequences allow the attacker to terminate intended FTP commands and inject arbitrary FTP commands, potentially leading to arbitrary code execution or other severe impacts.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-28296