{"vulnerability": "CVE-2026-5506", "sightings": [{"uuid": "0e8e774f-461e-4f51-be2d-cef711ebad7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55069", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp7ynytgw32x", "content": "CVE-2026-55069 - Kestra BasicAuth Password Stored as SHA-512 Enables Offline Brute-Force Attack\nCVE ID : CVE-2026-55069\n \n Published : June 26, 2026, 8:50 p.m. | 55\u00a0minutes ago\n \n Description : Kestra is an open-source, event-driven orchestration platform. Prior to 1.3.24, thi...", "creation_timestamp": "2026-06-26T22:30:30.226361Z"}, {"uuid": "a29ac59b-e3c6-4d0c-bf80-b4c74780a246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55069", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mp7zjccddf2o", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-55069](https://github.com/kestra-io/kestra/security/advisories/GHSA-m727-pcjm-j28h)\nKes...\nhttps://github.com/kestra-io/kestra/security/advisories/GHSA-m727-pcjm-j28h #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-06-26T22:45:45.936653Z"}, {"uuid": "c3ab1d78-e782-4d06-9e04-ad0b7af00508", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55069", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpbwpjf4lb2u", "content": "\ud83d\udfe0 CVE-2026-55069 - High (8.7)\n\nKestra is an open-source, event-driven orchestration platform. Prior to 1.3.24, this vulnerabilit...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-55069/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-27T17:00:54.884734Z"}, {"uuid": "3185adb1-12d5-4172-b5d2-24bd12e5534c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55069", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mph7cuthjb22", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55069 \u0432 Kestra: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/923174EB-9E31-41FD-B95D-59EB4E7165A8", "creation_timestamp": "2026-06-29T19:18:11.128647Z"}, {"uuid": "de92dc7c-6241-498f-9770-1a7eabc046e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55062", "type": "published-proof-of-concept", "source": "https://github.com/uniget-org/cli/security/advisories/GHSA-m6jg-wr9m-cg2f", "content": "", "creation_timestamp": "2026-08-17T20:35:09.591071Z"}, {"uuid": "99a449d1-59e8-454d-9c1b-b95dd1cdec46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55061", "type": "published-proof-of-concept", "source": "https://github.com/uniget-org/cli/security/advisories/GHSA-qmcq-xw74-w667", "content": "", "creation_timestamp": "2026-08-17T20:35:11.844185Z"}, {"uuid": "e40367c8-32d2-4c2d-879b-5f78336bd09c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55069", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mplmcphgkk2t", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55069 \u0432 Kestra: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/67CA1664-5F3A-4F65-8C3D-01CB739029B6", "creation_timestamp": "2026-07-01T13:21:23.192661Z"}, {"uuid": "87ad53f2-cc18-47ed-a294-a84084d4c6c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55069", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqaqrggkse2n", "content": "\ud83d\udccc CVE-2026-55069 - Kestra is an open-source, event-driven orchestration platform. Prior to 1.3.24, this vulnerability exists in the BasicAuth authentication component of... https://www.cyberhub.blog/cves/CVE-2026-55069", "creation_timestamp": "2026-07-09T23:07:06.622265Z"}, {"uuid": "cd7ad2a9-a359-4704-9301-ee494b3bc753", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55068", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mua2k3cq6i2e", "content": "CVE-2026-55068 - github.com/free5gc/free5gc\nVersions of free5GC up to 4.2.2 let anyone with access to the internal API add false network function records without proper validation. These bogus entries are\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#free5gc #Golang #CVE #infosec", "creation_timestamp": "2026-08-29T14:10:04.046140Z"}, {"uuid": "34a24196-b4b6-4ae9-8bbf-d0e51faa2191", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55068", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu6er5jzmv2c", "content": "\ud83d\udea8 CVE-2026-55068 \u2014 CVSS 9.3 CRITICAL\n\nfree5GC is an open-source implementation of the 5G core network. In 4.2.2 and earlier, the NRF RegisterNFIn...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-55068\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-28T22:07:40.035956Z"}, {"uuid": "4ba6f47a-555d-4dc5-a923-9e0a83ffb7ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55068", "type": "seen", "source": "https://gist.github.com/alon710/6afc3d410daf4fc14ca37ccd754d5535", "content": "# CVE-2026-55068: CVE-2026-55068: Network Function Registration Poisoning in free5GC NRF\n\n> **CVSS Score:** 9.3\n> **Published:** 2026-08-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-55068\n\n## Summary\nImproper input validation in the free5GC Network Repository Function (NRF) enables attackers with Service-Based Interface (SBI) access to register poisoned Network Function (NF) profiles, facilitating control-plane redirection and credential sniffing.\n\n## TL;DR\nUnauthenticated remote attackers can register malformed NF profiles to redirect legitimate 5G control-plane signaling to attacker-controlled endpoints.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-20 (Improper Input Validation)\n- **Attack Vector**: Network (SBI access)\n- **CVSS v4.0**: 9.3\n- **Impact**: Control-Plane Redirect / Information Disclosure / Denial of Service\n- **Exploit Status**: Proof-of-Concept Available\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- free5GC Core v4.2.2 and earlier\n- free5GC NRF Component v1.4.4 and earlier\n- **free5GC**: <= 4.2.2 (Fixed in: `4.2.3`)\n- **NRF (Network Repository Function)**: <= 1.4.4 (Fixed in: `1.4.5`)\n\n## Mitigation\n\n- Upgrade the free5GC core platform to version v4.2.3 or higher.\n- Isolate the NRF microservice and update its binary component to version v1.4.5 or higher.\n- Implement mutual TLS (mTLS) authentication across the Service-Based Interface (SBI) to verify the identities of registering NFs.\n- Utilize Network Policies (Kubernetes NetPol) to strictly limit network communication to the NRF REST port (typically TCP 8000).\n\n**Remediation Steps:**\n1. Stop the running free5GC NRF process or tear down its container.\n2. Update the free5GC configuration and pull NRF component code from version 1.4.5 or later.\n3. Recompile the NRF binary using Go v1.21+ to incorporate the newly defined `nf_profile_validation.go` module.\n4. Verify the validation changes by attempting to send a malformed PUT profile with a non-UUID instance identifier and confirming that the server responds with an HTTP 400 Bad Request.\n\n## References\n\n- [GHSA-x8mj-6p3q-g5pp Security Advisory](https://github.com/free5gc/free5gc/security/advisories/GHSA-x8mj-6p3q-g5pp)\n- [GitHub Issue 1056: NF Profile Validation Flaw](https://github.com/free5gc/free5gc/issues/1056)\n- [free5GC Core v4.2.3 Release Notes](https://github.com/free5gc/free5gc/releases/tag/v4.2.3)\n- [free5GC NRF v1.4.5 Release Notes](https://github.com/free5gc/nrf/releases/tag/v1.4.5)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-55068) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-28T17:33:07.263962Z"}, {"uuid": "e9d9f350-b8c8-42fe-b796-b7a58424cba5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55065", "type": "published-proof-of-concept", "source": "https://github.com/go-vikunja/vikunja/security/advisories/GHSA-gg93-x632-9ccv", "content": "", "creation_timestamp": "2026-08-28T18:35:30.376391Z"}, {"uuid": "5a470ad8-beee-4a5b-bd01-9ad6caa15d4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55066", "type": "published-proof-of-concept", "source": "https://github.com/go-vikunja/vikunja/security/advisories/GHSA-5pg6-m483-7vrg", "content": "", "creation_timestamp": "2026-08-28T18:35:28.228748Z"}, {"uuid": "e243dcb2-b6dd-40ae-9e0b-73e64c41dfd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55068", "type": "published-proof-of-concept", "source": "https://github.com/free5gc/free5gc/security/advisories/GHSA-x8mj-6p3q-g5pp", "content": "", "creation_timestamp": "2026-08-28T18:35:23.920963Z"}, {"uuid": "b722e1f7-c5ba-4d3e-b27a-5b750b2e85d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55067", "type": "published-proof-of-concept", "source": "https://github.com/go-vikunja/vikunja/security/advisories/GHSA-569v-q83c-3j3g", "content": "", "creation_timestamp": "2026-08-28T18:35:26.093534Z"}, {"uuid": "a24ecdbb-d572-4644-b3c7-57e55c829c62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55065", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mucnwabjtq2l", "content": "\ud83d\udfe0 CVE-2026-55065 - High (8.1)\n\nVikunja is an open-source self-hosted task management platform. From 0.24.6 until 2.4.0, DELETE /...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-55065/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-30T15:02:13.668341Z"}, {"uuid": "dc2c049a-e3fc-45cc-bd53-21f3fe69c67a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55064", "type": "seen", "source": "https://t.me/hacking_Attack/190565", "content": "Vikunja CVE-2026\u201355064: The Vulnerability Hidden in the Previous Security Fix\nhttps://medium.com/@Infosec-Arsenal-Diaries/vikunja-cve-2026-55064-the-vulnerability-hidden-in-the-previous-security-fix-3f84f84c35bc?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:06.156137Z"}, {"uuid": "e49d98fb-1f9b-4f44-8fc8-a8f9d49fde8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55064", "type": "seen", "source": "https://t.me/hacking_Attack/190567", "content": "How an \u201cout of scope\u201d edge case in Vikunja\u2019s previous privilege-escalation patch became a new authorization vulnerability three months\u2026Continue reading on Medium \u00bb (https://medium.com/@Infosec-Arsenal-Diaries/vikunja-cve-2026-55064-the-vulnerability-hidden-in-the-previous-security-fix-3f84f84c35bc?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:05.867381Z"}, {"uuid": "2f14abda-e09e-4d5a-8cd8-027f288c7fb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55064", "type": "seen", "source": "https://t.me/hacking_Attack/190565", "content": "Vikunja CVE-2026\u201355064: The Vulnerability Hidden in the Previous Security Fix\nhttps://medium.com/@Infosec-Arsenal-Diaries/vikunja-cve-2026-55064-the-vulnerability-hidden-in-the-previous-security-fix-3f84f84c35bc?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:00:25.028829Z"}, {"uuid": "bb306a61-68e7-4720-bb24-7702f40b9961", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55064", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/190567", "content": "How an \u201cout of scope\u201d edge case in Vikunja\u2019s previous privilege-escalation patch became a new authorization vulnerability three months\u2026Continue reading on Medium \u00bb (https://medium.com/@Infosec-Arsenal-Diaries/vikunja-cve-2026-55064-the-vulnerability-hidden-in-the-previous-security-fix-3f84f84c35bc?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:00:25.403622Z"}]}