{"metadata": {"vulnerability": "CVE-2026-56782", "count": 26, "kinds": {"milestone": 4, "sighting": 13, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-06-15T00:00:00Z", "date_only": false, "value": "2026-06-15T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-56782", "field": "containers.cna.datePublic"}, {"timestamp": "2026-06-23T01:24:27.650Z", "date_only": false, "value": "2026-06-23T01:24:27.650Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-56782", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-06-29T17:16:14.050Z", "date_only": false, "value": "2026-06-29T17:16:14.050Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-56782", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-06-29T18:16:38Z", "date_only": false, "value": "2026-06-29T18:16:38Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-65P2-39GR-3M25", "record": "GHSA-65P2-39GR-3M25", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-06-29T18:16:38.817Z", "date_only": false, "value": "2026-06-29T18:16:38.817", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-56782", "record": "FKIE_CVE-2026-56782", "field": "published"}, {"timestamp": "2026-06-29T18:31:55Z", "date_only": false, "value": "2026-06-29T18:31:55Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-65P2-39GR-3M25", "record": "GHSA-65P2-39GR-3M25", "field": "published"}, {"timestamp": "2026-06-29T18:31:55Z", "date_only": false, "value": "2026-06-29T18:31:55Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-65P2-39GR-3M25", "record": "GHSA-65P2-39GR-3M25", "field": "modified"}, {"timestamp": "2026-06-29T18:34:38.528Z", "date_only": false, "value": "2026-06-29T18:34:38.528785Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mph4uzdfuk25", "record": "CVE-2026-56782", "field": "creation_timestamp", "uuid": "64ff6fb4-d2b6-4911-84f8-7b214cdbf53e", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-56782 \u0432 Gorse: \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0435\u0433\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\n\n\n\nhttps://kripta.biz/posts/7854D19F-5618-432D-992B-15832165C649", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mph4uzdfuk25"}, {"timestamp": "2026-06-29T19:41:24.574Z", "date_only": false, "value": "2026-06-29T19:41:24.574961Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-56782", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-06-29T19:41:24.574Z", "date_only": false, "value": "2026-06-29T19:41:24.574961Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-56782", "record": "FKIE_CVE-2026-56782", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-06-29T19:41:31.675Z", "date_only": false, "value": "2026-06-29T19:41:31.675Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-56782", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-29T22:40:36.850Z", "date_only": false, "value": "2026-06-29T22:40:36.850275Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mphkmtrak22m", "record": "CVE-2026-56782", "field": "creation_timestamp", "uuid": "50dac507-b566-4399-85c2-70c631ba5845", "content": "CVE-2026-56782 - Gorse - Unauthenticated Database Dump and Restore via /api/dump and /api/restore Endpoints\nCVE ID : CVE-2026-56782\n \n Published : June 29, 2026, 5:16 p.m. | 3\u00a0hours, 56\u00a0minutes ago\n \n Description : Gorse before 0.5.10 contains an authentication bypass vulnerab...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mphkmtrak22m"}, {"timestamp": "2026-07-01T12:00:04.624Z", "date_only": false, "value": "2026-07-01T12:00:04.624685Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-56782.yaml", "record": "CVE-2026-56782", "field": "creation_timestamp", "uuid": "4202a43d-09ee-4b7a-a82c-db9775c3c729", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-56782.yaml"}, {"timestamp": "2026-07-13T22:00:14.072Z", "date_only": false, "value": "2026-07-13T22:00:14.072608Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/91668", "record": "CVE-2026-56782", "field": "creation_timestamp", "uuid": "f446fd63-0425-4f53-91cb-810ade02b1c8", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-56782\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a thecodeb0ss\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-02 23:14:38\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGorse < 0.5.10 contains an authentication bypass caused by empty admin_api_key in /api/dump and /api/restore endpoints, letting unauthenticated remote attackers access and modify protected data, exploit requires default empty admin_api_key configuration.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/91668"}, {"timestamp": "2026-07-13T22:00:16.558Z", "date_only": false, "value": "2026-07-13T22:00:16.558828Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/91207", "record": "CVE-2026-56782", "field": "creation_timestamp", "uuid": "7f67d18e-0041-4129-b842-3932316cdf62", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-56782-Gorse-Auth-Bypass\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BiiTts\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-29 22:10:15\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-56782 \u2014 Gorse <0.5.10 unauthenticated DB dump/restore (admin_api_key fail-open). Lab + PoC, verified e2e.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/91207"}, {"timestamp": "2026-07-14T21:34:25.529Z", "date_only": false, "value": "2026-07-14T21:34:25.529Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-56782", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-14T21:34:25.529Z", "date_only": false, "value": "2026-07-14T21:34:25.529Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-56782", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-14T22:17:22.233Z", "date_only": false, "value": "2026-07-14T22:17:22.233", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-56782", "record": "FKIE_CVE-2026-56782", "field": "lastModified"}, {"timestamp": "2026-07-15T00:00:24.659Z", "date_only": false, "value": "2026-07-15T00:00:24.659237Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/91207", "record": "CVE-2026-56782", "field": "creation_timestamp", "uuid": "3708b748-2f83-470b-ad07-40aed7035417", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-56782-Gorse-Auth-Bypass\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BiiTts\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-29 22:10:15\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-56782 \u2014 Gorse <0.5.10 unauthenticated DB dump/restore (admin_api_key fail-open). Lab + PoC, verified e2e.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/91207"}, {"timestamp": "2026-07-15T00:00:28.080Z", "date_only": false, "value": "2026-07-15T00:00:28.080016Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/91668", "record": "CVE-2026-56782", "field": "creation_timestamp", "uuid": "0754e48d-42a8-43b1-b2e3-71e82fba1fe0", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-56782\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a thecodeb0ss\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-02 23:14:38\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGorse < 0.5.10 contains an authentication bypass caused by empty admin_api_key in /api/dump and /api/restore endpoints, letting unauthenticated remote attackers access and modify protected data, exploit requires default empty admin_api_key configuration.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/91668"}, {"timestamp": "2026-07-16T19:00:23.331Z", "date_only": false, "value": "2026-07-16T19:00:23.331468Z", "kind": "sighting", "label": "Seen", "source": "Telegram/VvdfkZ3fmqFqnRePvtvh9SNhlsHfT_mO0dqmr0VGm2mB2Ks", "record": "CVE-2026-56782", "field": "creation_timestamp", "uuid": "c1432cfe-3b48-48be-a437-e2460cabb8b7"}, {"timestamp": "2026-07-16T19:00:27.223Z", "date_only": false, "value": "2026-07-16T19:00:27.223258Z", "kind": "sighting", "label": "Seen", "source": "Telegram/ADDtD90Ofg0gVFkx_t7HCTJWdu8wWDmHjLSkveEUhQJWpmU", "record": "CVE-2026-56782", "field": "creation_timestamp", "uuid": "f656b555-c479-4553-824b-d530d5db31ad"}, {"timestamp": "2026-07-16T19:00:27.256Z", "date_only": false, "value": "2026-07-16T19:00:27.256745Z", "kind": "sighting", "label": "Seen", "source": "Telegram/JkDbnMq7GUm5Q4-RPLqs1gjre-Qc5RO5_Ni4r9-mJNxKuLM", "record": "CVE-2026-56782", "field": "creation_timestamp", "uuid": "6bb4c16b-969d-4901-ae2a-ce82fb64ad6d"}, {"timestamp": "2026-07-18T00:00:07.623Z", "date_only": false, "value": "2026-07-18T00:00:07.623701Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/JkDbnMq7GUm5Q4-RPLqs1gjre-Qc5RO5_Ni4r9-mJNxKuLM", "record": "CVE-2026-56782", "field": "creation_timestamp", "uuid": "d5bada43-7cb7-491e-a25d-52ac38bea58b"}, {"timestamp": "2026-07-18T00:00:10.762Z", "date_only": false, "value": "2026-07-18T00:00:10.762275Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/VvdfkZ3fmqFqnRePvtvh9SNhlsHfT_mO0dqmr0VGm2mB2Ks", "record": "CVE-2026-56782", "field": "creation_timestamp", "uuid": "95bc2cba-e7a8-45c4-88cd-0390b8a90e2d"}, {"timestamp": "2026-07-18T01:00:04.394Z", "date_only": false, "value": "2026-07-18T01:00:04.394484Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ADDtD90Ofg0gVFkx_t7HCTJWdu8wWDmHjLSkveEUhQJWpmU", "record": "CVE-2026-56782", "field": "creation_timestamp", "uuid": "1084477c-5a76-4296-ad06-2a02fcbf6839"}]}