https://vulnerability.circl.lu/sightings/feed 2026-07-30T09:37:27.578700+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/99fbb6c6-8364-41d2-be52-7247b40e67d8/export 2026-07-30T09:37:27.591709+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "99fbb6c6-8364-41d2-be52-7247b40e67d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5056", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtdsrrucq2d", "content": "\ud83d\udfe0 CVE-2026-5056 - High (7.8)\n\nGStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerabi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-5056/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-30T02:01:00.657214Z"} 2026-07-30T02:01:00.657214+00:00 https://vulnerability.circl.lu/sighting/650dabee-562c-492c-aeb5-17a2eb3011cc/export 2026-07-30T09:37:27.593792+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "650dabee-562c-492c-aeb5-17a2eb3011cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5056", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrssxkpesz2a", "content": "CVE-2026-5056 - GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability\nCVE ID : CVE-2026-5056\n \n Published : July 29, 2026, 8:17 p.m. | 26\u00a0minutes ago\n \n Description : GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability....", "creation_timestamp": "2026-07-29T20:59:26.880486Z"} 2026-07-29T20:59:26.880486+00:00 https://vulnerability.circl.lu/sighting/ff7a5bff-086b-4220-86f7-fcba4e558e6c/export 2026-07-30T09:37:27.593929+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ff7a5bff-086b-4220-86f7-fcba4e558e6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50567", "type": "seen", "source": "https://bsky.app/profile/thestandup.bsky.social/post/3mrqcyosxc22o", "content": "A high-severity zip slip in Fission (CVE-2026-50567): archive entries were joined to the destination without checking the resolved path, so../../tmp/evil landed at /tmp/evil. Control of a package source URL means writes as the fetcher sidecar. #software", "creation_timestamp": "2026-07-28T21:08:25.730442Z"} 2026-07-28T21:08:25.730442+00:00 https://vulnerability.circl.lu/sighting/10bd0291-5965-4a57-bdf1-2bceef9b4681/export 2026-07-30T09:37:27.594035+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "10bd0291-5965-4a57-bdf1-2bceef9b4681", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50562", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpfr6wosn2i", "content": "CVE-2026-50562 - FastGPT: Untrusted PR artifacts are pushed and deployed by privileged preview workflows\nCVE ID : CVE-2026-50562\n \n Published : July 15, 2026, 6:16 p.m. | 17\u00a0minutes ago\n \n Description : FastGPT is a knowledge-based AI application platform. At commit 22ebfacbb4...", "creation_timestamp": "2026-07-15T19:00:07.174801Z"} 2026-07-15T19:00:07.174801+00:00 https://vulnerability.circl.lu/sighting/869e9498-6233-416f-b078-15af62605aab/export 2026-07-30T09:37:27.594134+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "869e9498-6233-416f-b078-15af62605aab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50562", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqper37t2l2d", "content": "CVE-2026-50562 - fastgpt\nFastGPT's preview workflows can accidentally push malicious Docker images to GHCR, potentially exposing sensitive data. This is a concern because attackers could exploit this to gain\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#fastgpt #labring #CVE #infosec", "creation_timestamp": "2026-07-15T18:42:06.459189Z"} 2026-07-15T18:42:06.459189+00:00 https://vulnerability.circl.lu/sighting/201e0463-e728-4a44-b7d8-8e56d3158a86/export 2026-07-30T09:37:27.594243+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "201e0463-e728-4a44-b7d8-8e56d3158a86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50564", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mpkong6fmb23", "content": "Fission <1.24.0: CRITICAL flaw (CVE-2026-50564) lets users create privileged pods, risking node takeover. Patch to v1.24.0 ASAP. Restrict CRD permissions as interim risk control. https://radar.offseq.com/threat/ghsa-gx55-f84r-v3r7-fission-environment-crd-podspe-d60bd0900af19d2d #OffSeq #Kubernete...", "creation_timestamp": "2026-07-01T04:30:31.425337Z"} 2026-07-01T04:30:31.425337+00:00 https://vulnerability.circl.lu/sighting/80546a39-1587-450b-835c-2b1005efccd8/export 2026-07-30T09:37:27.594345+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "80546a39-1587-450b-835c-2b1005efccd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50564", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116842838632410584", "content": "CVE-2026-50564 (CRITICAL): Fission <1.24.0 lets CRD users deploy privileged pods via unfiltered podSpec, leading to node escape & full compromise. Patch to v1.24.0. Restrict permissions if upgrade not possible. https://radar.offseq.com/threat/ghsa-gx55-f84r-v3r7-fission-environment-crd-podspe-d60bd0900af19d2d #OffSeq #Kubernetes #CVE202650564 #CloudSec", "creation_timestamp": "2026-07-01T04:30:29.149658Z"} 2026-07-01T04:30:29.149658+00:00 https://vulnerability.circl.lu/sighting/032c8e29-53ad-47f5-aed0-da2a8fdf2c21/export 2026-07-30T09:37:27.594443+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "032c8e29-53ad-47f5-aed0-da2a8fdf2c21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50566", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116842484590156234", "content": "CVE-2026-50566 (CRITICAL): Fission <1.24.0 allows SecurityContext bypass, letting attackers with Environment CRD access create privileged pods \u2014 risking container escape & cluster takeover. Patch to 1.24.0 & tighten RBAC. https://radar.offseq.com/threat/ghsa-m63v-2g9w-2w6v-fission-environment-runtimecon-e24c700c3e6ffd6e #OffSeq #Kubernetes #InfoSec", "creation_timestamp": "2026-07-01T03:00:26.721029Z"} 2026-07-01T03:00:26.721029+00:00 https://vulnerability.circl.lu/sighting/09bf0cf6-013c-4361-9c3d-a594c0d07248/export 2026-07-30T09:37:27.594542+00:00 Joseph Lee https://vulnerability.circl.lu/user/syspect {"uuid": "09bf0cf6-013c-4361-9c3d-a594c0d07248", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50566", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-m63v-2g9w-2w6v", "content": "", "creation_timestamp": "2026-07-01T02:50:23.588146Z"} 2026-07-01T02:50:23.588146+00:00 https://vulnerability.circl.lu/sighting/28fcf258-472b-4e7b-8015-9adcda26e326/export 2026-07-30T09:37:27.596120+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "28fcf258-472b-4e7b-8015-9adcda26e326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50560", "type": "seen", "source": "https://gist.github.com/alon710/b74444b3a1d431dd08f4a234b8c8a8c9", "content": "# CVE-2026-50560: CVE-2026-50560: Denial of Service in Netty HTTP/2 Codec via Max Header List Size Exception\n\n> **CVSS Score:** 6.9\n> **Published:** 2026-06-15\n> **Full Report:** https://cvereports.com/reports/CVE-2026-50560\n\n## Summary\nCVE-2026-50560 describes a vulnerability in Netty's HTTP/2 codec implementation. When acting as an intermediary (such as a reverse proxy, API gateway, or edge server), Netty can be forced into an application-level Denial-of-Service condition. The attack is triggered by negotiating a restrictive SETTINGS_MAX_HEADER_LIST_SIZE from the client, causing Netty to process incoming requests fully, but subsequently crash or abort during outbound response serialization. This results in an asymmetrical consumption of resources on backend systems and thread starvation within the Netty event loop.\n\n## TL;DR\nAn unauthenticated remote attacker can cause a Denial-of-Service condition in Netty-based HTTP/2 servers by negotiating a very low max header list size. This forces server-side exceptions and stream resets during outbound serialization, evading standard client-driven reset detection mechanics.\n\n## Technical Details\n\n- **CWE ID**: CWE-770\n- **Attack Vector**: Network (Remote)\n- **CVSS v4.0 Score**: 6.9 (Medium)\n- **EPSS Score**: 0.00302\n- **Impact**: Denial of Service (DoS)\n- **Exploit Status**: none\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Netty HTTP/2 Gateway Servers\n- Netty-based Reverse Proxies\n- Java applications utilizing netty-codec-http2\n- **Netty**: >= 4.1.0.Final, < 4.1.135.Final (Fixed in: `4.1.135.Final`)\n- **Netty**: >= 4.2.0.Final, < 4.2.15.Final (Fixed in: `4.2.15.Final`)\n\n## Mitigation\n\n- Upgrade Netty library dependencies to version 4.1.135.Final or 4.2.15.Final.\n- Configure fronting reverse proxies to enforce a minimum settable limit on SETTINGS_MAX_HEADER_LIST_SIZE.\n- Apply strict connection and concurrency rate limits at the perimeter to limit the volume of pipelined streams from a single source.\n\n**Remediation Steps:**\n1. Identify all projects and microservices using Netty by running a dependency tree check.\n2. Update Maven pom.xml or Gradle build.gradle files to reference Netty version 4.1.135.Final or 4.2.15.Final.\n3. Rebuild and redeploy the affected services to production.\n4. Monitor application log files for HTTP/2 write or serialization exceptions to verify remediation success.\n\n## References\n\n- [Netty Security Advisory GHSA-563q-j3cm-6jxm](https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm)\n- [Netty 4.1.135.Final Release](https://github.com/netty/netty/releases/tag/netty-4.1.135.Final)\n- [Netty 4.2.15.Final Release](https://github.com/netty/netty/releases/tag/netty-4.2.15.Final)\n- [RFC 9113 HTTP/2 Defined Settings](https://www.rfc-editor.org/rfc/rfc9113.html#name-defined-settings)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-50560) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-15T22:11:13.000000Z"} 2026-06-15T22:11:13+00:00