https://vulnerability.circl.lu/sightings/feed 2026-07-06T16:37:17.833536+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/ca843669-58f4-4ca7-9201-8299e4fc9abe/export 2026-07-06T16:37:17.858422+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ca843669-58f4-4ca7-9201-8299e4fc9abe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpwhtesstw2e", "content": "\ud83d\udd34 CVE-2026-20896 - Critical (9.8)\n\nGitea Docker image versions up to and including 1.26.2 use REVERSE_PROXY_TRUSTED_PROXIES=* by def...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-20896/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-05T21:00:31.349197Z"} 2026-07-05T21:00:31.349197+00:00 https://vulnerability.circl.lu/sighting/4a3f4580-eddd-4df0-9f29-1c8d4e7238d7/export 2026-07-06T16:37:17.860663+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4a3f4580-eddd-4df0-9f29-1c8d4e7238d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mpv7wdllhg2p", "content": "CVE-2026-20896 - Critical auth bypass in Gitea Docker images \u22641.26.2. Default REVERSE_PROXY_TRUSTED_PROXIES=* allows IP spoofing via X-WEBAUTH-USER headers. CVSS 9.8. No patch available. Update config now. #CVE #Gitea #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-20896/", "creation_timestamp": "2026-07-05T09:06:20.854926Z"} 2026-07-05T09:06:20.854926+00:00 https://vulnerability.circl.lu/sighting/c068d707-8172-41f5-9b49-d04721662b22/export 2026-07-06T16:37:17.860790+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c068d707-8172-41f5-9b49-d04721662b22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mprkvjpwpw2x", "content": "CVE-2026-20896 - gitea open source git server\nGitea's Docker image has a security setting that allows anyone to pretend to be a user when using certain reverse-proxy authentication headers. This is a concern because it\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#gitea #CVE #infosec", "creation_timestamp": "2026-07-03T22:12:05.560700Z"} 2026-07-03T22:12:05.560700+00:00 https://vulnerability.circl.lu/sighting/672973c2-2cc6-42ad-882c-039e474f5a47/export 2026-07-06T16:37:17.860889+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "672973c2-2cc6-42ad-882c-039e474f5a47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mpidta6bgb2n", "content": "\u533f\u540d\u306e\u7814\u7a76\u8005\u304c\u30bc\u30ed\u30c7\u30a4\u6570\u4ef6\u3092GitHub\u30ea\u30dd\u30b8\u30c8\u30ea\u3067\u516c\u958b\uff08CVE-2026-55200\u3001CVE-2026-20896\uff09 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-potato-alert/46394/", "creation_timestamp": "2026-06-30T06:11:36.036527Z"} 2026-06-30T06:11:36.036527+00:00 https://vulnerability.circl.lu/sighting/fc8bee44-ecb4-4692-a320-a34f4b558312/export 2026-07-06T16:37:17.860991+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "fc8bee44-ecb4-4692-a320-a34f4b558312", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mpidt76pcsbr", "content": "\u533f\u540d\u306e\u7814\u7a76\u8005\u304c\u30bc\u30ed\u30c7\u30a4\u6570\u4ef6\u3092GitHub\u30ea\u30dd\u30b8\u30c8\u30ea\u3067\u516c\u958b\uff08CVE-2026-55200\u3001CVE-2026-20896\uff09 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/46394/", "creation_timestamp": "2026-06-30T06:11:34.296661Z"} 2026-06-30T06:11:34.296661+00:00 https://vulnerability.circl.lu/sighting/62813ac8-aa84-459e-b470-7221608a9c68/export 2026-07-06T16:37:17.861087+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "62813ac8-aa84-459e-b470-7221608a9c68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20896", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mp65jcs6sh27", "content": "Three Vulnerabilities, One Platform: Why Your Self-Hosted Gitea/Gogs Instance Is Probably Already\u00a0Owned\n\nThree critical Gitea and Gogs CVEs disclosed in 2026: a CVSS 9.8 auth bypass via X-WEBAUTH-USER header,\u2026\n\nhttps://thecybersecguru.com/news/cve-2026-20896-gitea-authentication-bypass-dom-xss-ssrf/", "creation_timestamp": "2026-06-26T04:52:06.315766Z"} 2026-06-26T04:52:06.315766+00:00