{"vulnerability": "CVE-2026-5280", "sightings": [{"uuid": "5457d04d-d2af-4d37-ba27-22736e59c263", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5280", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3migbhqt6g624", "content": "", "creation_timestamp": "2026-04-01T08:27:41.458318Z"}, {"uuid": "311715c6-3ea5-46b2-a79c-07cff61ce638", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5280", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3miiqfztbls2h", "content": "", "creation_timestamp": "2026-04-02T08:00:29.877292Z"}, {"uuid": "372a1228-771f-400f-9e7f-4a810553a29c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5280", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/", "content": "", "creation_timestamp": "2026-03-31T17:00:00.000000Z"}, {"uuid": "08792187-a02f-4f68-8bbf-eb2ed8213911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5280", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260402", "content": "", "creation_timestamp": "2026-04-01T18:00:00.000000Z"}, {"uuid": "9363d3ef-6bd3-4d3e-b3f9-2d95d2849375", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5280", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0392/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "b3ac8855-948a-417f-bf5e-60a07bf4da21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5280", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260413", "content": "", "creation_timestamp": "2026-04-12T20:00:00.000000Z"}, {"uuid": "96f94363-a768-4230-b891-cb8cb5bca493", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5280", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "5c3cce83-4978-43bd-b964-77387b0859e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5280", "type": "seen", "source": "Telegram/Bkk_ez1WX0IehsVWjuM9-HkhESHwAR-xv4qkWYfcObZ2M48", "content": "", "creation_timestamp": "2026-04-02T01:18:12.000000Z"}, {"uuid": "035c089d-b1e7-422e-817d-3eb78c8a6188", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52801", "type": "published-proof-of-concept", "source": "https://github.com/gogs/gogs/security/advisories/GHSA-wv27-2vqp-j7g5", "content": "", "creation_timestamp": "2026-06-19T02:21:31.000000Z"}, {"uuid": "a252d680-e25d-4d6c-8be4-f95697835045", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52801", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mowgfyzzvh2y", "content": "Open sign-ups plus one missing check means any account on your Gogs server can read repositories it was never given.\n\nSelf-hosted Gogs before 0.14.3 is affected (CVE-2026-52801).\n\nUpdate to 0.14.3 and turn off open registration.", "creation_timestamp": "2026-06-23T03:09:57.531300Z"}, {"uuid": "4a7c8338-fef5-424f-b04c-df5096ffe847", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52809", "type": "published-proof-of-concept", "source": "https://github.com/gogs/gogs/security/advisories/GHSA-5c3f-6486-3g7g", "content": "", "creation_timestamp": "2026-06-19T02:19:01.000000Z"}, {"uuid": "fbda799c-0059-457d-9853-66a8df5153be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52808", "type": "published-proof-of-concept", "source": "https://github.com/gogs/gogs/security/advisories/GHSA-268j-37xf-pp52", "content": "", "creation_timestamp": "2026-06-19T02:19:10.000000Z"}, {"uuid": "4f984149-fcbc-4449-8d71-982c8a1f597f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52807", "type": "published-proof-of-concept", "source": "https://github.com/gogs/gogs/security/advisories/GHSA-vcm5-gvmp-78mp", "content": "", "creation_timestamp": "2026-06-19T02:19:30.000000Z"}, {"uuid": "bc7c939e-3494-4068-b50d-28e10b84712d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52806", "type": "published-proof-of-concept", "source": "https://github.com/gogs/gogs/security/advisories/GHSA-qf6p-p7ww-cwr9", "content": "", "creation_timestamp": "2026-06-19T02:19:43.000000Z"}, {"uuid": "ce765f92-88d5-43ad-8014-3a55870b4203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52802", "type": "published-proof-of-concept", "source": "https://github.com/gogs/gogs/security/advisories/GHSA-xxhq-69mf-w8cr", "content": "", "creation_timestamp": "2026-06-19T02:21:21.000000Z"}, {"uuid": "021790b1-1490-4feb-b7d7-d42ef92e0786", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52806", "type": "seen", "source": "https://t.me/GithubRedTeam/92219", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52806\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a portbuster1337\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 6  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-06 16:34:22\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGogs RCE via argument injection in git rebase (CWE-88) \u2014 Python PoC. CVE-2026-52806\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:11.304055Z"}, {"uuid": "d257c260-70b7-4a57-a89f-13f49cf38b12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52806", "type": "seen", "source": "https://t.me/GithubRedTeam/92219", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52806\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a portbuster1337\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 6  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-06 16:34:22\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGogs RCE via argument injection in git rebase (CWE-88) \u2014 Python PoC. CVE-2026-52806\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:19.719646Z"}, {"uuid": "3b329965-77ad-4865-a7d0-6cd6b256a7e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52806", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92219", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52806\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a portbuster1337\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 6  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-06 16:34:22\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGogs RCE via argument injection in git rebase (CWE-88) \u2014 Python PoC. CVE-2026-52806\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:30.496947Z"}]}