https://vulnerability.circl.lu/sightings/feed 2026-07-08T23:53:59.192803+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/0e0f3412-4d3c-4465-a097-1689f916301c/export 2026-07-08T23:53:59.219322+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0e0f3412-4d3c-4465-a097-1689f916301c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28699", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mpxqhwrilo2t", "content": "CVE-2026-28699 - High severity supply chain attack in Gitea. OAuth2 scope bypass via HTTP Basic auth. CVSS 8.1. Unpatched. Update immediately if using affected versions. #CVE #Gitea #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-28699/", "creation_timestamp": "2026-07-06T09:07:50.372255Z"} 2026-07-06T09:07:50.372255+00:00 https://vulnerability.circl.lu/sighting/c346f218-d495-49ac-b8f2-f4668d29bbfb/export 2026-07-08T23:53:59.221571+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c346f218-d495-49ac-b8f2-f4668d29bbfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28699", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpw5rqbag62f", "content": "\ud83d\udfe0 CVE-2026-28699 - High (8.1)\n\nGitea versions up to and including 1.26.1 allow OAuth2 access token scope enforcement to be bypas...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-28699/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-05T18:00:39.018489Z"} 2026-07-05T18:00:39.018489+00:00 https://vulnerability.circl.lu/sighting/6fc887fd-097d-43d1-ba89-586237e128a8/export 2026-07-08T23:53:59.221714+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "6fc887fd-097d-43d1-ba89-586237e128a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28699", "type": "published-proof-of-concept", "source": "Telegram/bfOUhtYO5_knJKoj_if_OKxt7hZq78r0zHfwCUUuIAza2Gk", "content": "", "creation_timestamp": "2026-06-11T11:00:12.000000Z"} 2026-06-11T11:00:12+00:00 https://vulnerability.circl.lu/sighting/8fc7bf35-378e-47f1-ae2c-eb3b5475d46a/export 2026-07-08T23:53:59.221824+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "8fc7bf35-378e-47f1-ae2c-eb3b5475d46a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28699", "type": "published-proof-of-concept", "source": "Telegram/X3d0ov_B01fXeFh1HIc4iOWU-yKPAhiRlXClKZPas190B7A", "content": "", "creation_timestamp": "2026-06-11T09:00:04.000000Z"} 2026-06-11T09:00:04+00:00 https://vulnerability.circl.lu/sighting/96876bea-b826-47e6-862d-4769e0bb9ddf/export 2026-07-08T23:53:59.221920+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "96876bea-b826-47e6-862d-4769e0bb9ddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-28699", "type": "published-proof-of-concept", "source": "https://github.com/go-gitea/gitea/security/advisories/GHSA-9r5x-wg6m-x2rc", "content": "", "creation_timestamp": "2026-06-05T22:22:25.000000Z"} 2026-06-05T22:22:25+00:00