CVE-2026-47187General

LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

0.5/ 10 priority

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 2 signals
  • General: 2 classified signals
  • Peaked 2d ago at 2 mentions (2026-05-30); latest day: 1
  • 4 total mentions across 3 days

Deep dive

Activity timeline4 mentions / 3d
01122Mentions · 2026-05-30: 2Mentions · 2026-06-02: 1Mentions · 2026-08-28: 1Patch / Workaround · 2026-06-02: 1Patch / Workaround · 2026-08-28: 1Technical Details · 2026-06-02: 1Technical Details · 2026-08-28: 105-3006-0208-28
Signal classification2 categories
General
250.0%
Patch
250.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-05-302
General2
2026-06-021
Patch1
2026-08-281
Patch1
Full discourse4 posts
  • Open Source Security mailing list@oss_security
    Patch

    CVE-2026-47187, CVE-2026-48711: sshfs <= 3.7.5 symlink escape (local file read/write) and ssh argument injection (local command execution) https://www.openwall.com/lists/oss-security/2026/05/30/3 Fixed in 3.7.6

    Post summary

    The entry announces CVE‑2026‑47187 and CVE‑2026‑48711, details the vulnerability types (symlink escape and SSH argument injection), and notes a fix in version 3.7.6.

    00085639
    4.7K followersView on X
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 CRITICAL: CVE-2026-47187 (CVSS 9.3) - SSHFS <3[.]7[.]6 vulnerable to symlink attack. Rogue SFTP servers can exploit symlinks to read/write local files. Patch immediately to 3[.]7[.]6+ #CVE #Vulnerability #PatchNow https://t.co/qNp9Z7mHTY

    Post summary

    The tweet announces a critical CVE‑2026‑47187 affecting SSHFS versions below 3.7.6, urging immediate patching to mitigate a symlink attack that could enable rogue SFTP servers to read or write local files.

    0000049
    121 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-48711 CVE-2026-47187, CVE-2026-48711 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-48711

    Post summary

    The entry lists CVE identifiers and a URL to a vulnerability details page but offers no further technical information or actionable insights.

    0000072
    4.0K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-47187 CVE-2026-47187, CVE-2026-48711 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-47187 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1

    Post summary

    The post merely lists CVE identifiers and links to a vulnerability details page, providing no additional context, technical details, or actionable information.

    0000077
    4.0K followersView on X

Explore more