https://vulnerability.circl.lu/sightings/feed 2026-07-16T03:05:38.961592+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/fad41bb9-ea24-49b9-a14a-db0f41977f0d/export 2026-07-16T03:05:38.981386+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "fad41bb9-ea24-49b9-a14a-db0f41977f0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50148", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqp3b2jai22u", "content": "CVE-2026-50148 - metabase\nAn attacker can exploit a flaw in the Snowflake database connection to write malicious files on the Metabase server. This can lead to unauthorized code execution, potentially compromising\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#metabase #CVE #infosec", "creation_timestamp": "2026-07-15T15:52:04.636694Z"} 2026-07-15T15:52:04.636694+00:00 https://vulnerability.circl.lu/sighting/29fadc08-3783-4427-84de-495359ba1b5b/export 2026-07-16T03:05:38.986108+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "29fadc08-3783-4427-84de-495359ba1b5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50141", "type": "seen", "source": "https://gist.github.com/alon710/97fd87eaf3ecb37ec75f6abd3050d94a", "content": "# CVE-2026-50141: CVE-2026-50141: Agent Impersonation via gRPC Metadata Spoofing in Woodpecker CI\n\n> **CVSS Score:** 7.1\n> **Published:** 2026-07-14\n> **Full Report:** https://cvereports.com/reports/CVE-2026-50141\n\n## Summary\nA critical authentication bypass vulnerability in Woodpecker CI allows authenticated agents to impersonate other agents by injecting spoofed agent_id values into gRPC metadata. This flaw is caused by the use of md.Append instead of md.Set on the server-side RPC authorizer.\n\n## TL;DR\nWoodpecker CI server used an unsafe metadata append operation, allowing authenticated agents to spoof their identity and impersonate any other registered agent.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-290, CWE-639\n- **Attack Vector**: Network\n- **CVSS v4.0 Score**: 7.1 (High)\n- **Exploit Status**: PoC (Proof of Concept)\n- **Affected Component**: gRPC Authorization Interceptor (server/rpc/authorizer.go)\n- **Fixed Version**: v3.14.1\n\n## Affected Systems\n\n- Woodpecker CI Server\n- **Woodpecker CI**: >= 3.0.0, < 3.14.1 (Fixed in: `3.14.1`)\n\n## Mitigation\n\n- Upgrade to Woodpecker CI server and agent version 3.14.1 or higher.\n- Disable user or organization-level agent registration to restrict authorized access to trusted administrators.\n\n**Remediation Steps:**\n1. Set the environment variable WOODPECKER_DISABLE_USER_AGENT_REGISTRATION=true on the Woodpecker server.\n2. Audit existing agents and remove any unauthorized or user-registered agents from the database.\n3. Deploy the updated Woodpecker server container image using version 3.14.1 or later.\n\n## References\n\n- [GitHub Security Advisory](https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-g7mm-9vx7-jm7h)\n- [Woodpecker Security Issue 21](https://github.com/woodpecker-ci/woodpecker-security/issues/21)\n- [Woodpecker Issue 6541](https://github.com/woodpecker-ci/woodpecker/issues/6541)\n- [Pull Request 6567](https://github.com/woodpecker-ci/woodpecker/pull/6567)\n- [Pull Request 6569](https://github.com/woodpecker-ci/woodpecker/pull/6569)\n- [NVD CVE-2026-50141 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-50141)\n- [CVE-2026-50141 Record](https://www.cve.org/CVERecord?id=CVE-2026-50141)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-50141) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-14T19:11:47.294997Z"} 2026-07-14T19:11:47.294997+00:00 https://vulnerability.circl.lu/sighting/81ee802e-3943-450f-bd8e-639150804e8b/export 2026-07-16T03:05:38.986559+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "81ee802e-3943-450f-bd8e-639150804e8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50143", "type": "published-proof-of-concept", "source": "https://github.com/apify/apify-mcp-server/security/advisories/GHSA-6gr2-qh89-hxwm", "content": "", "creation_timestamp": "2026-07-02T00:35:02.640513Z"} 2026-07-02T00:35:02.640513+00:00 https://vulnerability.circl.lu/sighting/52b91089-2e26-40e1-9279-c8219adf49ea/export 2026-07-16T03:05:38.988697+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "52b91089-2e26-40e1-9279-c8219adf49ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50146", "type": "published-proof-of-concept", "source": "https://github.com/withastro/astro/security/advisories/GHSA-8hv8-536x-4wqp", "content": "", "creation_timestamp": "2026-06-12T16:47:18.000000Z"} 2026-06-12T16:47:18+00:00 https://vulnerability.circl.lu/sighting/4dd331f6-77ed-43db-935e-c7494b347472/export 2026-07-16T03:05:38.988784+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4dd331f6-77ed-43db-935e-c7494b347472", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50142", "type": "seen", "source": "Telegram/pzVENME4v4pOP178n1fBBqEhAkVVR2GOmIUS6fyUz6Y6brw", "content": "", "creation_timestamp": "2026-06-04T15:00:06.000000Z"} 2026-06-04T15:00:06+00:00 https://vulnerability.circl.lu/sighting/056a238d-23fe-45ae-8c53-09fffce5948a/export 2026-07-16T03:05:38.988859+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "056a238d-23fe-45ae-8c53-09fffce5948a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5014", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mi5us7vke72d", "content": "", "creation_timestamp": "2026-03-29T00:19:36.130783Z"} 2026-03-29T00:19:36.130783+00:00