sshfs-fuse vulnerabilities (Debian)

2 vulnerabilities.

• sshfs-fuse Debian SSHFS: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') CVE-2026-48711 Fix available 7.0 HighJune 3, 2026
• sshfs-fuse Debian SSHFS Symlink Escape: Rogue SFTP Server → Local File Read/Write CVE-2026-47187 Fix available 9.3 CriticalJune 3, 2026