Threats Tagged 'cve-2026-48711'
View all threats tagged with 'cve-2026-48711'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-48711'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-48711 is a command injection vulnerability in sshfs, a network filesystem client for SSH servers. Versions from 1.4 up to but not including 3.7.6 are affected. The flaw arises when sshfs accepts a bracketed mount source that leads to improper neutralization of argument delimiters, allowing an attacker to inject a ProxyCommand that executes arbitrary commands locally before SSH connection or authentication. This requires an attacker-controlled mount source and specific sftp_server configuration. The issue is fixed in sshfs version 3.7.6. Join the discussion | CVE Database V5 | 08/19/2026, 14:42:50 UTC Added: 08/19/2026, 15:08:58 UTC |
0 This security update for sshfs addresses two critical vulnerabilities: CVE-2026-47187, a symlink escape vulnerability allowing a rogue SFTP server to perform local file read/write operations, and CVE-2026-48711, an argument injection vulnerability due to improper neutralization of argument delimiters. The update introduces new options to control symlink containment behavior and fixes other issues such as null pointer dereferences and malformed SFTP reply handling. Join the discussion | GCVE Database | 06/05/2026, 21:40:06 UTC Added: 09/17/2026, 01:59:26 UTC |
Showing 1 to 2 of 2 results