{"vulnerability": "cve-2026-7690", "sightings": [{"uuid": "218447cd-63c4-4ebf-b4da-c42d4686491a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76905", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mto53nthtb2o", "content": "CVE-2026-76905 - Unpatched DoS in kin-openapi. Malformed multipart request triggers nil pointer panic in error handling. CVSS 7.5. No fix yet - monitor for updates and apply workarounds. #CVE #infosec #Go\n\nhttps://www.valtersit.com/cve/CVE-2026-76905/", "creation_timestamp": "2026-08-22T11:07:46.166292Z"}, {"uuid": "ae973445-f04f-4bba-9159-b5571e11c2d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76905", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117138842245004180", "content": "CVE-2026-76905 - Unpatched DoS in kin-openapi. Malformed multipart request triggers nil pointer panic in error handling. CVSS 7.5. No fix yet - monitor for updates and apply workarounds. #CVE #infosec #Go\nhttps://www.valtersit.com/cve/CVE-2026-76905/", "creation_timestamp": "2026-08-22T11:08:08.931388Z"}, {"uuid": "f64ac8d8-0ce7-4e96-8a5e-04ec12c3c8d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76904", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmr46uv4d2o", "content": "\ud83d\udd34 CVE-2026-76904 - Critical (9.8)\n\nGeoTools is an open source Java library that provides tools for geospatial data. Starting in vers...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76904/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-21T22:00:39.932952Z"}, {"uuid": "9c466684-e0ce-477a-bc95-b95569ab4c0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76905", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmr4fj5tb26", "content": "\ud83d\udfe0 CVE-2026-76905 - High (7.5)\n\nkin-openapi is a Go project for handling OpenAPI files. From 0.10.0 until 0.141.0, openapi3filter...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76905/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-21T22:00:46.920423Z"}, {"uuid": "d347f4ba-3712-4bf6-89ed-d714e3c2971f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76904", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtmrja7q442p", "content": "\ud83d\udea8 CVE-2026-76904 \u2014 CVSS 9.8 CRITICAL\n\nGeoTools is an open source Java library that provides tools for geospatial data. Starting in version 30.5 a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76904\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T22:07:56.883914Z"}, {"uuid": "a15e4f4a-e17b-4271-aad9-8beb0131e154", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76905", "type": "seen", "source": "https://gist.github.com/alon710/a8fb06e2d4be25e5dcde47f19754cbdb", "content": "# CVE-2026-76905: CVE-2026-76905: Denial of Service via Nil-Pointer Dereference in getkin/kin-openapi openapi3filter\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-08-21\n> **Full Report:** https://cvereports.com/reports/CVE-2026-76905\n\n## Summary\nCVE-2026-76905 is a high-severity Denial of Service (DoS) vulnerability in the getkin/kin-openapi library, specifically inside the openapi3filter sub-package. When processing multipart/form-data request validation errors, a missing nil-pointer guard causes a Go runtime panic during error formatting. This panic terminates the active server process if no recovery handler is present, resulting in a total denial of service. The vulnerability affects versions from v0.10.0 to v0.140.0, and is resolved in v0.141.0.\n\n## TL;DR\nUnauthenticated remote attackers can crash servers using getkin/kin-openapi (v0.10.0 to v0.140.0) by transmitting a malformed multipart/form-data request, triggering a nil-pointer dereference panic in the error validation encoder.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-476\n- **Attack Vector**: Network\n- **CVSS Score**: 7.5\n- **EPSS Percentile**: N/A\n- **Impact**: Denial of Service (DoS)\n- **Exploit Status**: Proof-of-Concept\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Go applications using getkin/kin-openapi in combination with openapi3filter validation handlers.\n- **github.com/getkin/kin-openapi**: >= 0.10.0, < 0.141.0 (Fixed in: `v0.141.0`)\n\n## Mitigation\n\n- Upgrade to getkin/kin-openapi v0.141.0 or newer.\n- Deploy a panic recovery middleware helper at the HTTP handler layer to isolate and catch runtime panics.\n- Formulate client-side error responses using custom formatting wrappers that bypass the vulnerable ConvertErrors API.\n\n**Remediation Steps:**\n1. Open the active project directory containing the vulnerable go.mod file.\n2. Update the dependency to the patched version: go get github.com/getkin/kin-openapi@v0.141.0\n3. Verify and clean the dependency tree using: go mod tidy\n4. Verify the installation of panic-recovery middleware configurations at the root router level to guarantee fallback resilience.\n5. Recompile and redeploy the patched binaries to production environments.\n\n## References\n\n- [GitHub Security Advisory GHSA-mmfr-pmjx-hw9w](https://github.com/getkin/kin-openapi/security/advisories/GHSA-mmfr-pmjx-hw9w)\n- [Patch Commit 1d0a337c9b1570fab283be8a04c8af6e43b9a22c](https://github.com/getkin/kin-openapi/commit/1d0a337c9b1570fab283be8a04c8af6e43b9a22c)\n- [Release Tag v0.141.0](https://github.com/getkin/kin-openapi/releases/tag/v0.141.0)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-76905) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-22T05:32:17.976868Z"}, {"uuid": "614843ea-7636-4d1f-9d0c-246ff9216278", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-76905", "type": "published-proof-of-concept", "source": "https://github.com/getkin/kin-openapi/security/advisories/GHSA-mmfr-pmjx-hw9w", "content": "", "creation_timestamp": "2026-08-21T22:35:17.388189Z"}, {"uuid": "54b6054e-21c5-46ea-8982-34aa98874360", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76904", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmvk6uqro2e", "content": "CVE-2026-76904 - org.geotools.jdbc:gt-jdbc-postgis\nThe GeoTools library can insert untrusted data into database queries when using the jsonArrayContains function with PostGIS version 12 or newer. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#geotools #Java #CVE #infosec", "creation_timestamp": "2026-08-21T23:20:04.273744Z"}, {"uuid": "ada4a6ed-46fa-4b57-8378-e13e9291110d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76904", "type": "seen", "source": "https://gist.github.com/alon710/5c5c31a44818bfd282b695c164d075db", "content": "# CVE-2026-76904: CVE-2026-76904: Unauthenticated SQL Injection in GeoTools PostGIS DataStore Component\n\n> **CVSS Score:** 9.8\n> **Published:** 2026-08-21\n> **Full Report:** https://cvereports.com/reports/CVE-2026-76904\n\n## Summary\nA critical SQL injection vulnerability exists in the GeoTools open-source Java library. This vulnerability is situated within the post-processing phase of OGC Filter conversion inside the PostGIS DataStore module. Specifically, the `jsonArrayContains` function does not validate or sanitize its arguments before constructing PostgreSQL SQL/JSON path evaluation queries. An unauthenticated remote attacker can exploit this weakness by submitting crafted filters via standard OGC services like WFS or WMS to execute arbitrary SQL commands on the underlying database system.\n\n## TL;DR\nAn unauthenticated SQL injection vulnerability in the GeoTools `jsonArrayContains` OGC filter function allows remote attackers to execute arbitrary database commands and potentially achieve remote code execution by exploiting unsanitized input parsing in PostGIS database queries.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-89\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1**: 9.8 (Critical)\n- **Exploit Status**: PoC (Proof of Concept)\n- **Impact**: Unauthenticated SQL Injection & potential Remote Code Execution\n- **Component**: gt-jdbc-postgis (PostGIS DataStore)\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- GeoTools geospatial library\n- GeoServer installations leveraging PostGIS data stores\n- Java-based spatial middleware utilizing gt-jdbc-postgis modules\n- **GeoTools**: >= 30.5, < 33.6 (Fixed in: `33.6`)\n- **GeoTools**: >= 34.0, < 34.5 (Fixed in: `34.5`)\n- **GeoTools**: 35.0 (Fixed in: `35.1`)\n\n## Mitigation\n\n- Upgrade GeoTools dependencies to versions 33.6, 34.5, or 35.1 immediately.\n- Apply the Principle of Least Privilege to database connection configurations, ensuring the application cannot perform administrative tasks or write to the filesystem.\n- Configure Web Application Firewalls (WAF) to detect and block malicious JSON path patterns or SQL injection payloads in WFS and WMS query strings.\n\n**Remediation Steps:**\n1. Identify all projects and middleware applications utilizing the GeoTools library (such as GeoServer).\n2. Open the build configuration file (e.g., pom.xml or build.gradle) and locate the geotools dependency definitions.\n3. Update the `geotools.version` or specific `gt-jdbc-postgis` artifact versions to 33.6, 34.5, or 35.1.\n4. Rebuild the application, ensuring that transitive dependencies of downstream packages resolve to the patched version.\n5. Execute the test suites and verify that query capabilities function properly without breaking spatial operations.\n6. Redeploy the application to staging and production environments.\n\n## References\n\n- [GitHub Security Advisory GHSA-mqjf-5f49-2fjh](https://github.com/geotools/geotools/security/advisories/GHSA-mqjf-5f49-2fjh)\n- [GeoTools Remediation Commit d821c4d321dd91c22e31fcd5b1ce676645da5176](https://github.com/geotools/geotools/commit/d821c4d321dd91c22e31fcd5b1ce676645da5176)\n- [GeoTools Pull Request 5829](https://github.com/geotools/geotools/pull/5829)\n- [GeoTools 33.6 Release Tag](https://github.com/geotools/geotools/releases/tag/33.6)\n- [GeoTools 34.5 Release Tag](https://github.com/geotools/geotools/releases/tag/34.5)\n- [GeoTools 35.1 Release Tag](https://github.com/geotools/geotools/releases/tag/35.1)\n- [OSGeo Bug Tracker GEOT-7589](https://osgeo-org.atlassian.net/browse/GEOT-7589)\n- [OSGeo Bug Tracker GEOT-7958](https://osgeo-org.atlassian.net/browse/GEOT-7958)\n- [OSGeo Bug Tracker GEOT-7959](https://osgeo-org.atlassian.net/browse/GEOT-7959)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-76904) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-22T09:31:53.381135Z"}, {"uuid": "64997b60-84fc-4712-b54a-453662faea39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76904", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99268", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-76904\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a YonLiud\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 3  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-22 20:13:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGeoServer Unauthenticated SQL injection to complete RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T02:00:05.490675Z"}, {"uuid": "dba5231e-ee62-409a-9932-0ca18374c6e2", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76904", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/da6cf3b0-d16a-4fea-8be2-2b7c512e5691", "content": "", "creation_timestamp": "2026-08-26T01:01:02.908677Z"}, {"uuid": "6ad6f48b-81ef-4877-84b5-e07cbf9d7f0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76904", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99268", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-76904\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a YonLiud\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 3  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-22 20:13:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGeoServer Unauthenticated SQL injection to complete RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-24T00:00:09.719279Z"}]}