{"vulnerability": "cve-2026-14863", "sightings": [{"uuid": "2f0cdb6a-7c58-4582-897e-05c3e0f9c092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14863", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117089260878905642", "content": "New.\n\"Today VulnCheck is disclosing CVE-2026-14863, an OS command injection to remote code execution in FileRun, a commercial self-hosted file manager. It is being disclosed in accordance with VulnCheck's coordinated vulnerability disclosure policy.\"\n\"The motivation was deliberate. Open-source codebases are getting shredded by AI-assisted auditing, where every researcher and their LLM greps the same GitHub repos and finds the same bugs.\"\nVulncheck: FileRun: When Your File Manager Runs Your Files https://www.vulncheck.com/blog/filerun-thumbnail-command-injection-rce @vulncheck #infosec #opensource #vulnerability", "creation_timestamp": "2026-08-13T16:58:54.158131Z"}]}