https://vulnerability.circl.lu/sightings/feed 2026-07-08T13:08:47.683395+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/4f81d109-520e-4bd3-9a3d-6b14e87b41c0/export 2026-07-08T13:08:47.709628+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4f81d109-520e-4bd3-9a3d-6b14e87b41c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mq4gwsq67v2t", "content": "Gitea Docker (<1.26.3) hit by CRITICAL CVE-2026-20896. Auth bypass flaw is being exploited to access private code & secrets. Update to 1.26.3+ or restrict access immediately. https://radar.offseq.com/threat/critical-gitea-flaw-under-active-exploitation-rese-c58d67a324be5e40 #OffSeq #Gitea #Security", "creation_timestamp": "2026-07-08T06:00:31.269498Z"} 2026-07-08T06:00:31.269498+00:00 https://vulnerability.circl.lu/sighting/1b352c32-b1f7-4695-be14-6183dfe490a6/export 2026-07-08T13:08:47.711924+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1b352c32-b1f7-4695-be14-6183dfe490a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116882828726974974", "content": "CRITICAL: Gitea Docker (<1.26.3) is vulnerable to auth bypass (CVE-2026-20896) \u2014 attackers can access repos & secrets by spoofing a username header. Actively exploited! Patch to 1.26.3+ & restrict access now. https://radar.offseq.com/threat/critical-gitea-flaw-under-active-exploitation-rese-c58d67a324be5e40 #OffSeq #Gitea #Vuln #Infosec", "creation_timestamp": "2026-07-08T06:00:29.500188Z"} 2026-07-08T06:00:29.500188+00:00 https://vulnerability.circl.lu/sighting/b1c1c27d-f48b-4f3f-ade3-fb9d51f53c40/export 2026-07-08T13:08:47.712057+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b1c1c27d-f48b-4f3f-ade3-fb9d51f53c40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/technology-news.bsky.social/post/3mq474jhpg62i", "content": "CVE-2026-20896 lets reachable Gitea Docker containers trust spoofed X-WEBAUTH-USER headers when reverse proxy auth is enabled.", "creation_timestamp": "2026-07-08T03:40:32.735696Z"} 2026-07-08T03:40:32.735696+00:00 https://vulnerability.circl.lu/sighting/e81ca082-bee8-4328-b9bc-c1b0711d1b2d/export 2026-07-08T13:08:47.712160+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e81ca082-bee8-4328-b9bc-c1b0711d1b2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq3qggs4ez27", "content": "CVE-2026-20896: Is Gitea's Critical Docker Vulnerability a Policy Failure? #CyberSecurity #Vulnerability #Gitea", "creation_timestamp": "2026-07-07T23:17:39.541976Z"} 2026-07-07T23:17:39.541976+00:00 https://vulnerability.circl.lu/sighting/88bc5b1c-e5b3-4098-b23f-d4f43fc827a1/export 2026-07-08T13:08:47.712255+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "88bc5b1c-e5b3-4098-b23f-d4f43fc827a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq3qgcu54z27", "content": "CVE-2026-20896: Gitea's Docker Flaw Exposes Repositories\u2014Is Anyone Paying Attention? #CVE202620896 #Gitea #Docker", "creation_timestamp": "2026-07-07T23:17:35.908797Z"} 2026-07-07T23:17:35.908797+00:00 https://vulnerability.circl.lu/sighting/07ee9327-d719-4e23-b60d-d795b1154e67/export 2026-07-08T13:08:47.712354+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "07ee9327-d719-4e23-b60d-d795b1154e67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq3qg6wsf32s", "content": "CVE-2026-20896: Gitea's Docker Flaw Exposes Critical Repositories Due to Configuration Failures #CVE202620896 #Gitea #Docker", "creation_timestamp": "2026-07-07T23:17:31.448100Z"} 2026-07-07T23:17:31.448100+00:00 https://vulnerability.circl.lu/sighting/2046edb5-404c-4b30-a99d-46aa349614cb/export 2026-07-08T13:08:47.712453+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2046edb5-404c-4b30-a99d-46aa349614cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq3qfzzak324", "content": "CVE-2026-20896: Gitea's Bug Exposes Repositories, Demands Urgent Attention #CVE202620896 #Gitea #CyberSecurity", "creation_timestamp": "2026-07-07T23:17:26.143975Z"} 2026-07-07T23:17:26.143975+00:00 https://vulnerability.circl.lu/sighting/7cd607fc-238e-4de7-81d1-26b96d651323/export 2026-07-08T13:08:47.712556+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "7cd607fc-238e-4de7-81d1-26b96d651323", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq3qfup33j27", "content": "CVE-2026-20896 Exposes Gitea Docker Repositories: Attackers Seizing Control #CVE202620896 #Gitea #Docker", "creation_timestamp": "2026-07-07T23:17:20.610586Z"} 2026-07-07T23:17:20.610586+00:00 https://vulnerability.circl.lu/sighting/cd70650b-5da5-40f3-901d-a167591fab03/export 2026-07-08T13:08:47.712649+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "cd70650b-5da5-40f3-901d-a167591fab03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq3qfqngqi2f", "content": "CVE-2026-20896: Gitea's Docker Vulnerability Is a Recipe for Disaster #CyberSecurity #Vulnerability #Gitea", "creation_timestamp": "2026-07-07T23:17:16.565066Z"} 2026-07-07T23:17:16.565066+00:00 https://vulnerability.circl.lu/sighting/8f23c26e-0bb9-414f-bfd2-d9966088a489/export 2026-07-08T13:08:47.712744+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "8f23c26e-0bb9-414f-bfd2-d9966088a489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mq3jlslaca27", "content": "Active exploitation of CVE-2026-20896 lets attackers bypass Gitea auth with a valid username and one HTTP header, risking repo, secret, and CI/CD takeover. Update Docker images to 1.26.3. #Gitea #CVE202620896 #DevSecOps", "creation_timestamp": "2026-07-07T21:15:23.659334Z"} 2026-07-07T21:15:23.659334+00:00