VDB
CVE-2026-28296
CVE-2026-28296
PUBLISHED
EPSS 0.09% · 26.3th percentile
Risk Scores
EPSS Score
0.09%
26.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Amazon | gvfs |
Exploit Intelligence
- CIRCL seen: CVE-2026-28296 (circl-sighting)
- CIRCL seen: CVE-2026-28296 (circl-sighting)
- CIRCL seen: CVE-2026-28296 (circl-sighting)
- RHBZ#2443003 (circl)
- https://access.redhat.com/security/cve/CVE-2026-28296 (circl)
- poc_crlf_injection.py (github-poc)
- poc_crlf_injection.py (github-poc)
- poc_crlf_injection.py (github-poc)
- poc_crlf_injection.py (github-poc)
- poc_crlf_injection.py (github-poc)
…and 2 more exploits
Timeline
- Feb 26, 2026 CVE ID Reserved
- Feb 26, 2026 CVE Published
- Feb 26, 2026 CVE Updated
- Feb 26, 2026 PoC Published
- Feb 27, 2026 EPSS Score
- Feb 28, 2026 EPSS Score
- Mar 1, 2026 PoC Published
- Mar 2, 2026 EPSS Score
- Mar 3, 2026 EPSS Score
- Mar 5, 2026 EPSS Score
- Mar 6, 2026 EPSS Score
- Mar 8, 2026 EPSS Score
References
- ALAS2-2026-3197: gvfs (medium) advisory