{"vulnerability": "cve-2026-2869", "sightings": [{"uuid": "f5089a94-9b1b-482b-986a-c2b6d9b66ef1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28697", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgcqrifnfy2c", "content": "", "creation_timestamp": "2026-03-05T12:00:32.391322Z"}, {"uuid": "44ccdd4e-5a3a-4676-b39b-5a9e9560187b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28696", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgauuz2k3r2u", "content": "", "creation_timestamp": "2026-03-04T18:08:45.567648Z"}, {"uuid": "45473b65-8749-4d71-bd3f-a02f48bf243b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28697", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgav4onbmc2u", "content": "", "creation_timestamp": "2026-03-04T18:13:06.106025Z"}, {"uuid": "cce10402-f217-4124-a3ae-11a936a2d659", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28692", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116316841599408182", "content": "", "creation_timestamp": "2026-03-30T07:02:34.339259Z"}, {"uuid": "b474a8ca-7b99-4e82-8455-60dbb9cffb75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28691", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116316841599408182", "content": "", "creation_timestamp": "2026-03-30T07:02:31.657894Z"}, {"uuid": "66dd0878-b9fc-4ac5-a801-e65522f4be9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28690", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116316841599408182", "content": "", "creation_timestamp": "2026-03-30T07:02:33.249919Z"}, {"uuid": "96e8e700-23dd-45f8-8ce6-17111c26ed0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28693", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116316841599408182", "content": "", "creation_timestamp": "2026-03-30T07:02:31.434320Z"}, {"uuid": "34c2a493-377d-45cb-b38b-2558bab7de1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-28697", "type": "published-proof-of-concept", "source": "https://github.com/craftcms/cms/security/advisories/GHSA-v47q-jxvr-p68x", "content": "", "creation_timestamp": "2026-03-02T23:05:25.000000Z"}, {"uuid": "eca87399-8a40-4266-a302-0bb83f6bd7df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-28695", "type": "published-proof-of-concept", "source": "https://github.com/craftcms/cms/security/advisories/GHSA-94rc-cqvm-m4pw", "content": "", "creation_timestamp": "2026-03-02T23:04:57.000000Z"}, {"uuid": "96876bea-b826-47e6-862d-4769e0bb9ddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-28699", "type": "published-proof-of-concept", "source": "https://github.com/go-gitea/gitea/security/advisories/GHSA-9r5x-wg6m-x2rc", "content": "", "creation_timestamp": "2026-06-05T22:22:25.000000Z"}, {"uuid": "8fc7bf35-378e-47f1-ae2c-eb3b5475d46a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28699", "type": "published-proof-of-concept", "source": "Telegram/X3d0ov_B01fXeFh1HIc4iOWU-yKPAhiRlXClKZPas190B7A", "content": "", "creation_timestamp": "2026-06-11T09:00:04.000000Z"}, {"uuid": "6fc887fd-097d-43d1-ba89-586237e128a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28699", "type": "published-proof-of-concept", "source": "Telegram/bfOUhtYO5_knJKoj_if_OKxt7hZq78r0zHfwCUUuIAza2Gk", "content": "", "creation_timestamp": "2026-06-11T11:00:12.000000Z"}, {"uuid": "c346f218-d495-49ac-b8f2-f4668d29bbfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28699", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpw5rqbag62f", "content": "\ud83d\udfe0 CVE-2026-28699 - High (8.1)\n\nGitea versions up to and including 1.26.1 allow OAuth2 access token scope enforcement to be bypas...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-28699/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-05T18:00:39.018489Z"}, {"uuid": "0e0f3412-4d3c-4465-a097-1689f916301c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28699", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mpxqhwrilo2t", "content": "CVE-2026-28699 - High severity supply chain attack in Gitea. OAuth2 scope bypass via HTTP Basic auth. CVSS 8.1. Unpatched. Update immediately if using affected versions. #CVE #Gitea #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-28699/", "creation_timestamp": "2026-07-06T09:07:50.372255Z"}, {"uuid": "b75b760a-441b-4e3b-9457-011918a878e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28699", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88282", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a gitea-CVE-2026-28699\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Alardiians\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-11 02:40:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nLab + writeup for CVE-2026-28699: Gitea OAuth2 scope enforcement bypass via HTTP Basic auth\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-12T07:00:04.447540Z"}, {"uuid": "dc92a656-31c0-49ea-a0fe-c820a0e6fb8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28699", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88282", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a gitea-CVE-2026-28699\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Alardiians\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-11 02:40:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nLab + writeup for CVE-2026-28699: Gitea OAuth2 scope enforcement bypass via HTTP Basic auth\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T00:00:49.720465Z"}]}