CVE-2026-57986

creationtimestamp| type| source ---|---|--- 2026-07-03 23:06:39+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mprnx3zpds2x 2026-07-05 17:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpw2gvrk3w2g 2026-07-06 07:49:17+00:00| seen|...

CVE-2026-11352

creationtimestamp| type| source ---|---|--- 2026-07-03 21:32:17+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprioe4hwb2n 2026-07-07 20:02:28+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mq3fjgesej2n...

CVE-2026-10536

creationtimestamp| type| source ---|---|--- 2026-07-03 21:31:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprinqanou2j 2026-07-06 20:03:19+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mpyv3ztk4p2e 2026-08-26 22:40:12+00:00| seen|...

CVE-2026-58426

Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write...

CVE-2026-27779

Gitea versions before 1.25.5 accept malformed or injected forwarded-proto values when detecting public URLs, allowing spoofed canonical URL generation...

CVE-2026-14605

creationtimestamp| type| source ---|---|--- 2026-07-03 21:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mprgvrigd72r 2026-07-03 22:02:56+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mprkf6gjah2i 2026-07-03 22:19:59+00:00| seen|...

CVE-2026-58426

The CVE-2026-58426 affects Gitea, specifically the Actions Artifacts V4 signed URL mechanism, where an HMAC ambiguity enables cross-repository artifact read and cross-task upload-state write. The vulnerability stems from how signed URLs are validated, allowing unauthorized access across repositor...

CVE-2026-58426 Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write

Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write...

EUVD-2026-41637

Gitea versions before 1.25.5 accept malformed or injected forwarded-proto values when detecting public URLs, allowing spoofed canonical URL generation...

CVE-2026-27779 Gitea forwarded-proto handling allows public URL spoofing

Gitea versions before 1.25.5 accept malformed or injected forwarded-proto values when detecting public URLs, allowing spoofed canonical URL generation...

CVE-2026-46466

creationtimestamp| type| source ---|---|--- 2026-07-03 18:25:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpr6ay546f2g 2026-07-04 06:56:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpsi7ljojq2d...

CVE-2026-49814

creationtimestamp| type| source ---|---|--- 2026-07-03 18:11:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpr5hfm6s62l 2026-07-04 09:07:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpspipehmc2d 2026-07-05 05:05:58+00:00| seen|...

CVE-2026-46465

creationtimestamp| type| source ---|---|--- 2026-07-03 18:01:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpr4vd63442b 2026-07-04 06:48:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpshqqxkzc2n...

CVE-2026-26145

creationtimestamp| type| source ---|---|--- 2026-07-03 17:57:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpr4oq7qhq2f 2026-07-14 19:01:02+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0233 2026-07-14 22:02:09+00:00| seen|...

CVE-2026-14631

creationtimestamp| type| source ---|---|--- 2026-07-03 17:27:52+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mpr2zahx5k2i 2026-07-03 22:25:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mprlmmi2h32l...

CVE-2026-52188

creationtimestamp| type| source ---|---|--- 2026-07-03 17:22:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpr2oxwnpc2f...

CVE-2026-38969

creationtimestamp| type| source ---|---|--- 2026-07-03 17:19:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpr2kwpfdy2c...

CVE-2026-49815

creationtimestamp| type| source ---|---|--- 2026-07-03 17:11:06+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mpr23cux7q2y 2026-07-03 17:53:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpr4hsesi32h 2026-07-04 09:07:24+00:00| seen|...

CVE-2026-14460

creationtimestamp| type| source ---|---|--- 2026-07-03 17:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpqzirh54m26 2026-07-03 18:20:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpr5xznc7d2h 2026-07-04 09:07:53+00:00| seen|...

CVE-2026-53226

creationtimestamp| type| source ---|---|--- 2026-07-03 15:51:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqvmqcvp22d 2026-07-21 19:40:08+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mr6ksc4abk2n 2026-07-21 19:40:09+00:00| seen|...