https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 08 Jul 2026 13:08:47 +0000 https://vulnerability.circl.lu/sighting/4f81d109-520e-4bd3-9a3d-6b14e87b41c0/export {"uuid": "4f81d109-520e-4bd3-9a3d-6b14e87b41c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mq4gwsq67v2t", "content": "Gitea Docker (<1.26.3) hit by CRITICAL CVE-2026-20896. Auth bypass flaw is being exploited to access private code & secrets. Update to 1.26.3+ or restrict access immediately. https://radar.offseq.com/threat/critical-gitea-flaw-under-active-exploitation-rese-c58d67a324be5e40 #OffSeq #Gitea #Security", "creation_timestamp": "2026-07-08T06:00:31.269498Z"} {"uuid": "4f81d109-520e-4bd3-9a3d-6b14e87b41c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mq4gwsq67v2t", "content": "Gitea Docker (<1.26.3) hit by CRITICAL CVE-2026-20896. Auth bypass flaw is being exploited to access private code & secrets. Update to 1.26.3+ or restrict access immediately. https://radar.offseq.com/threat/critical-gitea-flaw-under-active-exploitation-rese-c58d67a324be5e40 #OffSeq #Gitea #Security", "creation_timestamp": "2026-07-08T06:00:31.269498Z"} https://vulnerability.circl.lu/sighting/4f81d109-520e-4bd3-9a3d-6b14e87b41c0/export Wed, 08 Jul 2026 06:00:31 +0000 https://vulnerability.circl.lu/sighting/1b352c32-b1f7-4695-be14-6183dfe490a6/export {"uuid": "1b352c32-b1f7-4695-be14-6183dfe490a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116882828726974974", "content": "CRITICAL: Gitea Docker (<1.26.3) is vulnerable to auth bypass (CVE-2026-20896) \u2014 attackers can access repos & secrets by spoofing a username header. Actively exploited! Patch to 1.26.3+ & restrict access now. https://radar.offseq.com/threat/critical-gitea-flaw-under-active-exploitation-rese-c58d67a324be5e40 #OffSeq #Gitea #Vuln #Infosec", "creation_timestamp": "2026-07-08T06:00:29.500188Z"} {"uuid": "1b352c32-b1f7-4695-be14-6183dfe490a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116882828726974974", "content": "CRITICAL: Gitea Docker (<1.26.3) is vulnerable to auth bypass (CVE-2026-20896) \u2014 attackers can access repos & secrets by spoofing a username header. Actively exploited! Patch to 1.26.3+ & restrict access now. https://radar.offseq.com/threat/critical-gitea-flaw-under-active-exploitation-rese-c58d67a324be5e40 #OffSeq #Gitea #Vuln #Infosec", "creation_timestamp": "2026-07-08T06:00:29.500188Z"} https://vulnerability.circl.lu/sighting/1b352c32-b1f7-4695-be14-6183dfe490a6/export Wed, 08 Jul 2026 06:00:29 +0000 https://vulnerability.circl.lu/sighting/b1c1c27d-f48b-4f3f-ade3-fb9d51f53c40/export {"uuid": "b1c1c27d-f48b-4f3f-ade3-fb9d51f53c40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/technology-news.bsky.social/post/3mq474jhpg62i", "content": "CVE-2026-20896 lets reachable Gitea Docker containers trust spoofed X-WEBAUTH-USER headers when reverse proxy auth is enabled.", "creation_timestamp": "2026-07-08T03:40:32.735696Z"} {"uuid": "b1c1c27d-f48b-4f3f-ade3-fb9d51f53c40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/technology-news.bsky.social/post/3mq474jhpg62i", "content": "CVE-2026-20896 lets reachable Gitea Docker containers trust spoofed X-WEBAUTH-USER headers when reverse proxy auth is enabled.", "creation_timestamp": "2026-07-08T03:40:32.735696Z"} https://vulnerability.circl.lu/sighting/b1c1c27d-f48b-4f3f-ade3-fb9d51f53c40/export Wed, 08 Jul 2026 03:40:32 +0000 https://vulnerability.circl.lu/sighting/e81ca082-bee8-4328-b9bc-c1b0711d1b2d/export {"uuid": "e81ca082-bee8-4328-b9bc-c1b0711d1b2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq3qggs4ez27", "content": "CVE-2026-20896: Is Gitea's Critical Docker Vulnerability a Policy Failure? #CyberSecurity #Vulnerability #Gitea", "creation_timestamp": "2026-07-07T23:17:39.541976Z"} {"uuid": "e81ca082-bee8-4328-b9bc-c1b0711d1b2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq3qggs4ez27", "content": "CVE-2026-20896: Is Gitea's Critical Docker Vulnerability a Policy Failure? #CyberSecurity #Vulnerability #Gitea", "creation_timestamp": "2026-07-07T23:17:39.541976Z"} https://vulnerability.circl.lu/sighting/e81ca082-bee8-4328-b9bc-c1b0711d1b2d/export Tue, 07 Jul 2026 23:17:39 +0000 https://vulnerability.circl.lu/sighting/88bc5b1c-e5b3-4098-b23f-d4f43fc827a1/export {"uuid": "88bc5b1c-e5b3-4098-b23f-d4f43fc827a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq3qgcu54z27", "content": "CVE-2026-20896: Gitea's Docker Flaw Exposes Repositories\u2014Is Anyone Paying Attention? #CVE202620896 #Gitea #Docker", "creation_timestamp": "2026-07-07T23:17:35.908797Z"} {"uuid": "88bc5b1c-e5b3-4098-b23f-d4f43fc827a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq3qgcu54z27", "content": "CVE-2026-20896: Gitea's Docker Flaw Exposes Repositories\u2014Is Anyone Paying Attention? #CVE202620896 #Gitea #Docker", "creation_timestamp": "2026-07-07T23:17:35.908797Z"} https://vulnerability.circl.lu/sighting/88bc5b1c-e5b3-4098-b23f-d4f43fc827a1/export Tue, 07 Jul 2026 23:17:35 +0000 https://vulnerability.circl.lu/sighting/07ee9327-d719-4e23-b60d-d795b1154e67/export {"uuid": "07ee9327-d719-4e23-b60d-d795b1154e67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq3qg6wsf32s", "content": "CVE-2026-20896: Gitea's Docker Flaw Exposes Critical Repositories Due to Configuration Failures #CVE202620896 #Gitea #Docker", "creation_timestamp": "2026-07-07T23:17:31.448100Z"} {"uuid": "07ee9327-d719-4e23-b60d-d795b1154e67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq3qg6wsf32s", "content": "CVE-2026-20896: Gitea's Docker Flaw Exposes Critical Repositories Due to Configuration Failures #CVE202620896 #Gitea #Docker", "creation_timestamp": "2026-07-07T23:17:31.448100Z"} https://vulnerability.circl.lu/sighting/07ee9327-d719-4e23-b60d-d795b1154e67/export Tue, 07 Jul 2026 23:17:31 +0000 https://vulnerability.circl.lu/sighting/2046edb5-404c-4b30-a99d-46aa349614cb/export {"uuid": "2046edb5-404c-4b30-a99d-46aa349614cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq3qfzzak324", "content": "CVE-2026-20896: Gitea's Bug Exposes Repositories, Demands Urgent Attention #CVE202620896 #Gitea #CyberSecurity", "creation_timestamp": "2026-07-07T23:17:26.143975Z"} {"uuid": "2046edb5-404c-4b30-a99d-46aa349614cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq3qfzzak324", "content": "CVE-2026-20896: Gitea's Bug Exposes Repositories, Demands Urgent Attention #CVE202620896 #Gitea #CyberSecurity", "creation_timestamp": "2026-07-07T23:17:26.143975Z"} https://vulnerability.circl.lu/sighting/2046edb5-404c-4b30-a99d-46aa349614cb/export Tue, 07 Jul 2026 23:17:26 +0000 https://vulnerability.circl.lu/sighting/7cd607fc-238e-4de7-81d1-26b96d651323/export {"uuid": "7cd607fc-238e-4de7-81d1-26b96d651323", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq3qfup33j27", "content": "CVE-2026-20896 Exposes Gitea Docker Repositories: Attackers Seizing Control #CVE202620896 #Gitea #Docker", "creation_timestamp": "2026-07-07T23:17:20.610586Z"} {"uuid": "7cd607fc-238e-4de7-81d1-26b96d651323", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq3qfup33j27", "content": "CVE-2026-20896 Exposes Gitea Docker Repositories: Attackers Seizing Control #CVE202620896 #Gitea #Docker", "creation_timestamp": "2026-07-07T23:17:20.610586Z"} https://vulnerability.circl.lu/sighting/7cd607fc-238e-4de7-81d1-26b96d651323/export Tue, 07 Jul 2026 23:17:20 +0000 https://vulnerability.circl.lu/sighting/cd70650b-5da5-40f3-901d-a167591fab03/export {"uuid": "cd70650b-5da5-40f3-901d-a167591fab03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq3qfqngqi2f", "content": "CVE-2026-20896: Gitea's Docker Vulnerability Is a Recipe for Disaster #CyberSecurity #Vulnerability #Gitea", "creation_timestamp": "2026-07-07T23:17:16.565066Z"} {"uuid": "cd70650b-5da5-40f3-901d-a167591fab03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq3qfqngqi2f", "content": "CVE-2026-20896: Gitea's Docker Vulnerability Is a Recipe for Disaster #CyberSecurity #Vulnerability #Gitea", "creation_timestamp": "2026-07-07T23:17:16.565066Z"} https://vulnerability.circl.lu/sighting/cd70650b-5da5-40f3-901d-a167591fab03/export Tue, 07 Jul 2026 23:17:16 +0000 https://vulnerability.circl.lu/sighting/8f23c26e-0bb9-414f-bfd2-d9966088a489/export {"uuid": "8f23c26e-0bb9-414f-bfd2-d9966088a489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mq3jlslaca27", "content": "Active exploitation of CVE-2026-20896 lets attackers bypass Gitea auth with a valid username and one HTTP header, risking repo, secret, and CI/CD takeover. Update Docker images to 1.26.3. #Gitea #CVE202620896 #DevSecOps", "creation_timestamp": "2026-07-07T21:15:23.659334Z"} {"uuid": "8f23c26e-0bb9-414f-bfd2-d9966088a489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mq3jlslaca27", "content": "Active exploitation of CVE-2026-20896 lets attackers bypass Gitea auth with a valid username and one HTTP header, risking repo, secret, and CI/CD takeover. Update Docker images to 1.26.3. #Gitea #CVE202620896 #DevSecOps", "creation_timestamp": "2026-07-07T21:15:23.659334Z"} https://vulnerability.circl.lu/sighting/8f23c26e-0bb9-414f-bfd2-d9966088a489/export Tue, 07 Jul 2026 21:15:23 +0000