https://vulnerability.circl.lu/sightings/feed 2026-07-22T23:49:36.974509+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/1288e141-0e20-43d6-8386-4f97baa77aec/export 2026-07-22T23:49:37.023267+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "1288e141-0e20-43d6-8386-4f97baa77aec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-58443", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mr7igp2ksw2x", "content": "CVE-2026-58443 in Gitea (<1.27.0): CRITICAL bug allows public-only tokens to modify private PR head branches. Avoid risky tokens, monitor for patch. https://radar.offseq.com/threat/gitea-public-only-repository-tokens-can-update-private-pr-head-branches-cve-2026-58443-d058444d84b9595a #OffSeq #Git...", "creation_timestamp": "2026-07-22T04:30:30.733727Z"} 2026-07-22T04:30:30.733727+00:00 https://vulnerability.circl.lu/sighting/55c6671d-7eca-4dbf-b2df-b0fc656febb5/export 2026-07-22T23:49:37.025121+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "55c6671d-7eca-4dbf-b2df-b0fc656febb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-58443", "type": "published-proof-of-concept", "source": "https://github.com/go-gitea/gitea/security/advisories/GHSA-xxjv-752h-3vp2", "content": "", "creation_timestamp": "2026-07-21T22:35:59.098284Z"} 2026-07-21T22:35:59.098284+00:00 https://vulnerability.circl.lu/sighting/545177b0-ff34-4ffc-a38e-0f389230373b/export 2026-07-22T23:49:37.026291+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "545177b0-ff34-4ffc-a38e-0f389230373b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58443", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6ptacohx2v", "content": "CVE-2026-58443 - gitea\nA public-only token for a public repository can update a private pull request branch. This can happen because Gitea checks the token's restrictions against the public base repository, not\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#gitea #Golang #CVE #infosec", "creation_timestamp": "2026-07-21T21:10:05.639472Z"} 2026-07-21T21:10:05.639472+00:00 https://vulnerability.circl.lu/sighting/b0d43acc-2c90-4f3d-9810-2b4cf5c4dc1f/export 2026-07-22T23:49:37.026425+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "b0d43acc-2c90-4f3d-9810-2b4cf5c4dc1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58443", "type": "seen", "source": "https://bsky.app/profile/threadlinqs.bsky.social/post/3mr5gp547642e", "content": "A public-only Gitea token can quietly write into private repos and fire their CI runners. CVE-2026-58443. https://intel.threadlinqs.com/threat/TL-2026-1587 #ThreatIntel #CVE_2026_58443 #GHSAxxjv752h3vp2 #Gitea", "creation_timestamp": "2026-07-21T08:54:05.006390Z"} 2026-07-21T08:54:05.006390+00:00 https://vulnerability.circl.lu/sighting/e87954f5-61a6-468c-ba86-c6ae173a6306/export 2026-07-22T23:49:37.026531+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e87954f5-61a6-468c-ba86-c6ae173a6306", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58443", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mr5g64l3e72v", "content": "Critical Gitea flaw (CVE-2026-58443) allows unauthorized private repo access. Update to v1.27.0 now. #Gitea #CVE202658443 #CyberSecurity #DevOps #Git #OpenSource #SecurityUpdate thedailytechfeed.com/critical-git...", "creation_timestamp": "2026-07-21T08:44:34.947845Z"} 2026-07-21T08:44:34.947845+00:00 https://vulnerability.circl.lu/sighting/ed9affd9-c3be-4c95-9014-bc04e5e7f3c5/export 2026-07-22T23:49:37.026641+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ed9affd9-c3be-4c95-9014-bc04e5e7f3c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58443", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mr3ktbnp5p2w", "content": "Gitea vulnerability CVE-2026-58443 (CVSS 9.6) lets public-only tokens write to private repos. Details and PoC code are public. Update to v1.27.0.\n\n#Gitea #CVE202658443 #DevSecOps #PoC #InfoSec", "creation_timestamp": "2026-07-20T15:02:39.615618Z"} 2026-07-20T15:02:39.615618+00:00