CVE-2026-14617

creationtimestamp| type| source ---|---|--- 2026-07-04 02:22:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpryvqv2xs25...

CVE-2026-45489

creationtimestamp| type| source ---|---|--- 2026-07-04 02:18:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpryod5tdx2x 2026-07-06 07:48:47+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706 2026-07-12 20:27:39+00:00| seen|...

CVE-2026-58419

creationtimestamp| type| source ---|---|--- 2026-07-04 02:11:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mprybxveca2a...

CVE-2026-58421

creationtimestamp| type| source ---|---|--- 2026-07-04 02:10:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpry7bqhnw2e 2026-07-21 22:36:19+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-v96j-25gv-g2w9...

CVE-2026-58288

creationtimestamp| type| source ---|---|--- 2026-07-04 02:09:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpry5ia4zw2e 2026-07-05 03:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpulikpxph2v 2026-07-06 07:49:58+00:00| seen|...

CVE-2026-58293

creationtimestamp| type| source ---|---|--- 2026-07-04 01:54:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mprxcmuvgy2e 2026-07-04 22:01:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpu2qnzrw62g 2026-07-06 07:50:13+00:00| seen|...

CVE-2026-57981

creationtimestamp| type| source ---|---|--- 2026-07-04 01:22:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mprvjicmpx2e 2026-07-04 04:15:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116859765559758505 2026-07-05 15:01:03+00:00| seen|...

CVE-2026-4322

creationtimestamp| type| source ---|---|--- 2026-07-03 23:44:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprq33dgrg2f...

CVE-2026-57986

creationtimestamp| type| source ---|---|--- 2026-07-03 23:06:39+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mprnx3zpds2x 2026-07-05 17:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpw2gvrk3w2g 2026-07-06 07:49:17+00:00| seen|...

CVE-2026-11352

creationtimestamp| type| source ---|---|--- 2026-07-03 21:32:17+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprioe4hwb2n 2026-07-07 20:02:28+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mq3fjgesej2n...

CVE-2026-10536

creationtimestamp| type| source ---|---|--- 2026-07-03 21:31:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprinqanou2j 2026-07-06 20:03:19+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mpyv3ztk4p2e 2026-08-26 22:40:12+00:00| seen|...

CVE-2026-58426

Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write...

CVE-2026-27779

Gitea versions before 1.25.5 accept malformed or injected forwarded-proto values when detecting public URLs, allowing spoofed canonical URL generation...

CVE-2026-14605

creationtimestamp| type| source ---|---|--- 2026-07-03 21:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mprgvrigd72r 2026-07-03 22:02:56+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mprkf6gjah2i 2026-07-03 22:19:59+00:00| seen|...

CVE-2026-58426

The CVE-2026-58426 affects Gitea, specifically the Actions Artifacts V4 signed URL mechanism, where an HMAC ambiguity enables cross-repository artifact read and cross-task upload-state write. The vulnerability stems from how signed URLs are validated, allowing unauthorized access across repositor...

CVE-2026-58426 Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write

Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write...

EUVD-2026-41637

Gitea versions before 1.25.5 accept malformed or injected forwarded-proto values when detecting public URLs, allowing spoofed canonical URL generation...

CVE-2026-27779 Gitea forwarded-proto handling allows public URL spoofing

Gitea versions before 1.25.5 accept malformed or injected forwarded-proto values when detecting public URLs, allowing spoofed canonical URL generation...

CVE-2026-46466

creationtimestamp| type| source ---|---|--- 2026-07-03 18:25:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpr6ay546f2g 2026-07-04 06:56:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpsi7ljojq2d...

CVE-2026-49814

creationtimestamp| type| source ---|---|--- 2026-07-03 18:11:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpr5hfm6s62l 2026-07-04 09:07:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpspipehmc2d 2026-07-05 05:05:58+00:00| seen|...