{"uuid": "11592fdc-c52a-463a-96d4-b2ae8191de95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mqm2hyngyx26", "content": "Gitea Docker CVE-2026-20896 (CVSS 9.8): one spoofed HTTP header = full admin access. ~6,200 exposed instances. Active exploitation confirmed. Patch to 1.26.4 now.\n\n\ud83c\uddec\ud83c\udde7 zurl.co/G9E8x\n\ud83c\udde9\ud83c\uddea zurl.co/KwwWP \n\n #CyberSecurity #Gitea #CVE", "creation_timestamp": "2026-07-14T11:00:04.968761Z"}