{"vulnerability": "cve-2026-5056", "sightings": [{"uuid": "99fbb6c6-8364-41d2-be52-7247b40e67d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5056", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtdsrrucq2d", "content": "\ud83d\udfe0 CVE-2026-5056 - High (7.8)\n\nGStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerabi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-5056/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-30T02:01:00.657214Z"}, {"uuid": "a0d2ed9b-5080-4329-83ca-483b40afda6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50566", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnxfnyxjts2i", "content": "CVE-2026-50566 - Fission: Environment Runtime.Container and Builder.Container SecurityContext bypass allows privileged pod creation\nCVE ID : CVE-2026-50566\n \n Published : June 10, 2026, 6:17 p.m. | 23\u00a0minutes ago\n \n Description : Fission is an open-source, Kubernetes-native se...", "creation_timestamp": "2026-06-10T19:04:29.532503Z"}, {"uuid": "01643536-72f5-465a-842e-590fca529933", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50565", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnxfqtpsfb2e", "content": "CVE-2026-50565 - Fission builder pods auto-mount the fission-builder ServiceAccount token in the user-supplied builder container\nCVE ID : CVE-2026-50565\n \n Published : June 10, 2026, 6:17 p.m. | 23\u00a0minutes ago\n \n Description : Fission is an open-source, Kubernetes-native serve...", "creation_timestamp": "2026-06-10T19:05:34.964549Z"}, {"uuid": "3abaf466-f446-4305-b1be-9436a5195a6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50567", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnxfwzd6yv24", "content": "CVE-2026-50567 - Fission: Zip Slip in pkg/utils/zip.go:Unarchive allows fetcher to write outside the destination directory\nCVE ID : CVE-2026-50567\n \n Published : June 10, 2026, 6:17 p.m. | 23\u00a0minutes ago\n \n Description : Fission is an open-source, Kubernetes-native serverless ...", "creation_timestamp": "2026-06-10T19:09:02.110778Z"}, {"uuid": "95fbb62e-b812-4ca8-a62e-2676a4ac2e76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50564", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnxgpf7ogi25", "content": "CVE-2026-50564 - Fission Environment CRD podspec passthrough enables hostPID/hostNetwork/privileged pods, node escape\nCVE ID : CVE-2026-50564\n \n Published : June 10, 2026, 6:17 p.m. | 23\u00a0minutes ago\n \n Description : Fission is an open-source, Kubernetes-native serverless frame...", "creation_timestamp": "2026-06-10T19:22:39.818024Z"}, {"uuid": "70c8adab-4ad4-4d3d-9efe-9ea9705ca18b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50563", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnxh2qrmmv2u", "content": "CVE-2026-50563 - Fission Container Executor Function PodSpec Injection Leading to Node Escape\nCVE ID : CVE-2026-50563\n \n Published : June 10, 2026, 6:17 p.m. | 23\u00a0minutes ago\n \n Description : Fission is an open-source, Kubernetes-native serverless framework that simplifies the...", "creation_timestamp": "2026-06-10T19:29:00.911425Z"}, {"uuid": "f7225556-c836-4ed9-bd37-e42f2c1c8c3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50568", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnxhj5i6c42i", "content": "CVE-2026-50568 - Fission: SanitizeFilePath lexical HasPrefix bypass permits sibling-directory escape\nCVE ID : CVE-2026-50568\n \n Published : June 10, 2026, 6:17 p.m. | 23\u00a0minutes ago\n \n Description : Fission is an open-source, Kubernetes-native serverless framework that simplif...", "creation_timestamp": "2026-06-10T19:37:09.870265Z"}, {"uuid": "8c68d2a4-1f11-4724-8f5d-122fef3211a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50569", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnxie2wmbr24", "content": "CVE-2026-50569 - Fission: HTTPTrigger admission omits RelativeURL / Prefix validation; kubectl apply bypasses CLI checks\nCVE ID : CVE-2026-50569\n \n Published : June 10, 2026, 6:17 p.m. | 23\u00a0minutes ago\n \n Description : Fission is an open-source, Kubernetes-native serverless fr...", "creation_timestamp": "2026-06-10T19:52:07.382727Z"}, {"uuid": "28fcf258-472b-4e7b-8015-9adcda26e326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50560", "type": "seen", "source": "https://gist.github.com/alon710/b74444b3a1d431dd08f4a234b8c8a8c9", "content": "# CVE-2026-50560: CVE-2026-50560: Denial of Service in Netty HTTP/2 Codec via Max Header List Size Exception\n\n> **CVSS Score:** 6.9\n> **Published:** 2026-06-15\n> **Full Report:** https://cvereports.com/reports/CVE-2026-50560\n\n## Summary\nCVE-2026-50560 describes a vulnerability in Netty's HTTP/2 codec implementation. When acting as an intermediary (such as a reverse proxy, API gateway, or edge server), Netty can be forced into an application-level Denial-of-Service condition. The attack is triggered by negotiating a restrictive SETTINGS_MAX_HEADER_LIST_SIZE from the client, causing Netty to process incoming requests fully, but subsequently crash or abort during outbound response serialization. This results in an asymmetrical consumption of resources on backend systems and thread starvation within the Netty event loop.\n\n## TL;DR\nAn unauthenticated remote attacker can cause a Denial-of-Service condition in Netty-based HTTP/2 servers by negotiating a very low max header list size. This forces server-side exceptions and stream resets during outbound serialization, evading standard client-driven reset detection mechanics.\n\n## Technical Details\n\n- **CWE ID**: CWE-770\n- **Attack Vector**: Network (Remote)\n- **CVSS v4.0 Score**: 6.9 (Medium)\n- **EPSS Score**: 0.00302\n- **Impact**: Denial of Service (DoS)\n- **Exploit Status**: none\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Netty HTTP/2 Gateway Servers\n- Netty-based Reverse Proxies\n- Java applications utilizing netty-codec-http2\n- **Netty**: >= 4.1.0.Final, < 4.1.135.Final (Fixed in: `4.1.135.Final`)\n- **Netty**: >= 4.2.0.Final, < 4.2.15.Final (Fixed in: `4.2.15.Final`)\n\n## Mitigation\n\n- Upgrade Netty library dependencies to version 4.1.135.Final or 4.2.15.Final.\n- Configure fronting reverse proxies to enforce a minimum settable limit on SETTINGS_MAX_HEADER_LIST_SIZE.\n- Apply strict connection and concurrency rate limits at the perimeter to limit the volume of pipelined streams from a single source.\n\n**Remediation Steps:**\n1. Identify all projects and microservices using Netty by running a dependency tree check.\n2. Update Maven pom.xml or Gradle build.gradle files to reference Netty version 4.1.135.Final or 4.2.15.Final.\n3. Rebuild and redeploy the affected services to production.\n4. Monitor application log files for HTTP/2 write or serialization exceptions to verify remediation success.\n\n## References\n\n- [Netty Security Advisory GHSA-563q-j3cm-6jxm](https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm)\n- [Netty 4.1.135.Final Release](https://github.com/netty/netty/releases/tag/netty-4.1.135.Final)\n- [Netty 4.2.15.Final Release](https://github.com/netty/netty/releases/tag/netty-4.2.15.Final)\n- [RFC 9113 HTTP/2 Defined Settings](https://www.rfc-editor.org/rfc/rfc9113.html#name-defined-settings)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-50560) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-15T22:11:13.000000Z"}, {"uuid": "09bf0cf6-013c-4361-9c3d-a594c0d07248", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50566", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-m63v-2g9w-2w6v", "content": "", "creation_timestamp": "2026-07-01T02:50:23.588146Z"}, {"uuid": "032c8e29-53ad-47f5-aed0-da2a8fdf2c21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50566", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116842484590156234", "content": "CVE-2026-50566 (CRITICAL): Fission <1.24.0 allows SecurityContext bypass, letting attackers with Environment CRD access create privileged pods \u2014 risking container escape & cluster takeover. Patch to 1.24.0 & tighten RBAC. https://radar.offseq.com/threat/ghsa-m63v-2g9w-2w6v-fission-environment-runtimecon-e24c700c3e6ffd6e #OffSeq #Kubernetes #InfoSec", "creation_timestamp": "2026-07-01T03:00:26.721029Z"}, {"uuid": "80546a39-1587-450b-835c-2b1005efccd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50564", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116842838632410584", "content": "CVE-2026-50564 (CRITICAL): Fission <1.24.0 lets CRD users deploy privileged pods via unfiltered podSpec, leading to node escape & full compromise. Patch to v1.24.0. Restrict permissions if upgrade not possible. https://radar.offseq.com/threat/ghsa-gx55-f84r-v3r7-fission-environment-crd-podspe-d60bd0900af19d2d #OffSeq #Kubernetes #CVE202650564 #CloudSec", "creation_timestamp": "2026-07-01T04:30:29.149658Z"}, {"uuid": "201e0463-e728-4a44-b7d8-8e56d3158a86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50564", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mpkong6fmb23", "content": "Fission <1.24.0: CRITICAL flaw (CVE-2026-50564) lets users create privileged pods, risking node takeover. Patch to v1.24.0 ASAP. Restrict CRD permissions as interim risk control. https://radar.offseq.com/threat/ghsa-gx55-f84r-v3r7-fission-environment-crd-podspe-d60bd0900af19d2d #OffSeq #Kubernete...", "creation_timestamp": "2026-07-01T04:30:31.425337Z"}, {"uuid": "869e9498-6233-416f-b078-15af62605aab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50562", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqper37t2l2d", "content": "CVE-2026-50562 - fastgpt\nFastGPT's preview workflows can accidentally push malicious Docker images to GHCR, potentially exposing sensitive data. This is a concern because attackers could exploit this to gain\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#fastgpt #labring #CVE #infosec", "creation_timestamp": "2026-07-15T18:42:06.459189Z"}, {"uuid": "10bd0291-5965-4a57-bdf1-2bceef9b4681", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50562", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpfr6wosn2i", "content": "CVE-2026-50562 - FastGPT: Untrusted PR artifacts are pushed and deployed by privileged preview workflows\nCVE ID : CVE-2026-50562\n \n Published : July 15, 2026, 6:16 p.m. | 17\u00a0minutes ago\n \n Description : FastGPT is a knowledge-based AI application platform. At commit 22ebfacbb4...", "creation_timestamp": "2026-07-15T19:00:07.174801Z"}, {"uuid": "ff7a5bff-086b-4220-86f7-fcba4e558e6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50567", "type": "seen", "source": "https://bsky.app/profile/thestandup.bsky.social/post/3mrqcyosxc22o", "content": "A high-severity zip slip in Fission (CVE-2026-50567): archive entries were joined to the destination without checking the resolved path, so../../tmp/evil landed at /tmp/evil. Control of a package source URL means writes as the fetcher sidecar. #software", "creation_timestamp": "2026-07-28T21:08:25.730442Z"}, {"uuid": "650dabee-562c-492c-aeb5-17a2eb3011cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5056", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrssxkpesz2a", "content": "CVE-2026-5056 - GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability\nCVE ID : CVE-2026-5056\n \n Published : July 29, 2026, 8:17 p.m. | 26\u00a0minutes ago\n \n Description : GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability....", "creation_timestamp": "2026-07-29T20:59:26.880486Z"}]}