https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 08 Jul 2026 23:53:59 +0000 https://vulnerability.circl.lu/sighting/0e0f3412-4d3c-4465-a097-1689f916301c/export {"uuid": "0e0f3412-4d3c-4465-a097-1689f916301c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28699", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mpxqhwrilo2t", "content": "CVE-2026-28699 - High severity supply chain attack in Gitea. OAuth2 scope bypass via HTTP Basic auth. CVSS 8.1. Unpatched. Update immediately if using affected versions. #CVE #Gitea #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-28699/", "creation_timestamp": "2026-07-06T09:07:50.372255Z"} {"uuid": "0e0f3412-4d3c-4465-a097-1689f916301c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28699", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mpxqhwrilo2t", "content": "CVE-2026-28699 - High severity supply chain attack in Gitea. OAuth2 scope bypass via HTTP Basic auth. CVSS 8.1. Unpatched. Update immediately if using affected versions. #CVE #Gitea #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-28699/", "creation_timestamp": "2026-07-06T09:07:50.372255Z"} https://vulnerability.circl.lu/sighting/0e0f3412-4d3c-4465-a097-1689f916301c/export Mon, 06 Jul 2026 09:07:50 +0000 https://vulnerability.circl.lu/sighting/c346f218-d495-49ac-b8f2-f4668d29bbfb/export {"uuid": "c346f218-d495-49ac-b8f2-f4668d29bbfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28699", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpw5rqbag62f", "content": "\ud83d\udfe0 CVE-2026-28699 - High (8.1)\n\nGitea versions up to and including 1.26.1 allow OAuth2 access token scope enforcement to be bypas...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-28699/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-05T18:00:39.018489Z"} {"uuid": "c346f218-d495-49ac-b8f2-f4668d29bbfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28699", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpw5rqbag62f", "content": "\ud83d\udfe0 CVE-2026-28699 - High (8.1)\n\nGitea versions up to and including 1.26.1 allow OAuth2 access token scope enforcement to be bypas...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-28699/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-05T18:00:39.018489Z"} https://vulnerability.circl.lu/sighting/c346f218-d495-49ac-b8f2-f4668d29bbfb/export Sun, 05 Jul 2026 18:00:39 +0000 https://vulnerability.circl.lu/sighting/6fc887fd-097d-43d1-ba89-586237e128a8/export {"uuid": "6fc887fd-097d-43d1-ba89-586237e128a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28699", "type": "published-proof-of-concept", "source": "Telegram/bfOUhtYO5_knJKoj_if_OKxt7hZq78r0zHfwCUUuIAza2Gk", "content": "", "creation_timestamp": "2026-06-11T11:00:12.000000Z"} {"uuid": "6fc887fd-097d-43d1-ba89-586237e128a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28699", "type": "published-proof-of-concept", "source": "Telegram/bfOUhtYO5_knJKoj_if_OKxt7hZq78r0zHfwCUUuIAza2Gk", "content": "", "creation_timestamp": "2026-06-11T11:00:12.000000Z"} https://vulnerability.circl.lu/sighting/6fc887fd-097d-43d1-ba89-586237e128a8/export Thu, 11 Jun 2026 11:00:12 +0000 https://vulnerability.circl.lu/sighting/8fc7bf35-378e-47f1-ae2c-eb3b5475d46a/export {"uuid": "8fc7bf35-378e-47f1-ae2c-eb3b5475d46a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28699", "type": "published-proof-of-concept", "source": "Telegram/X3d0ov_B01fXeFh1HIc4iOWU-yKPAhiRlXClKZPas190B7A", "content": "", "creation_timestamp": "2026-06-11T09:00:04.000000Z"} {"uuid": "8fc7bf35-378e-47f1-ae2c-eb3b5475d46a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28699", "type": "published-proof-of-concept", "source": "Telegram/X3d0ov_B01fXeFh1HIc4iOWU-yKPAhiRlXClKZPas190B7A", "content": "", "creation_timestamp": "2026-06-11T09:00:04.000000Z"} https://vulnerability.circl.lu/sighting/8fc7bf35-378e-47f1-ae2c-eb3b5475d46a/export Thu, 11 Jun 2026 09:00:04 +0000 https://vulnerability.circl.lu/sighting/96876bea-b826-47e6-862d-4769e0bb9ddf/export {"uuid": "96876bea-b826-47e6-862d-4769e0bb9ddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-28699", "type": "published-proof-of-concept", "source": "https://github.com/go-gitea/gitea/security/advisories/GHSA-9r5x-wg6m-x2rc", "content": "", "creation_timestamp": "2026-06-05T22:22:25.000000Z"} {"uuid": "96876bea-b826-47e6-862d-4769e0bb9ddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-28699", "type": "published-proof-of-concept", "source": "https://github.com/go-gitea/gitea/security/advisories/GHSA-9r5x-wg6m-x2rc", "content": "", "creation_timestamp": "2026-06-05T22:22:25.000000Z"} https://vulnerability.circl.lu/sighting/96876bea-b826-47e6-862d-4769e0bb9ddf/export Fri, 05 Jun 2026 22:22:25 +0000