Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was detected in npitre cramfs-tools up to 2.2. Affected is the function change_file_status of the file cramfsck.c. Performing a manipulation results in symlink following. The attack requires a local approach. The exploit is now public and may be used. The patch is named b4a3a695c9873f824907bd15659f2a6ac7667b4f. It is recommended to apply a patch to fix this issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-8784 A vulnerability was detected in npitre cramfs-tools up to 2.2. Affected is the function change_file_status of the file cramfsck.c. Performing a manipulation results in … https://www.cve.org/CVERecord?id=CVE-2026-8784
Post summary
A new CVE-2026-8784 vulnerability has been identified in npitre cramfs-tools, affecting the change_file_status function in cramfsck.c; advisory details are available on cve.org.
CVE-2026-8784 Symlink Following Vulnerability in npitre cramfs-tools Up To 2.2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8784
Post summary
The entry announces CVE-2026-8784, a symlink following vulnerability affecting npitre cramfs-tools up to version 2.2, with a link for further details.