spingARbor
9 kredili kayıt · son 12 ayda 9 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
36İzleyin | CVE-2026-20912İstismar yok | Gitea: Cross-Repository Authorization Bypass via Release Attachment Linking Leads to Private Attachment Disclosuregitea · gitea · CWE-284 | Kritik9,1 | — | %0,5 | 22 Oca 2026 |
26İzleyin | CVE-2026-20904İstismar yok | Gitea: Broken access control in OpenID visibility toggle enables cross-user visibility changesgitea · gitea · CWE-284 | Orta6,5 | — | %0,3 | 22 Oca 2026 |
36İzleyin | CVE-2026-20897İstismar yok | Gitea Git LFS Lock Deletion Broken Access Control (Cross-Repo IDOR)gitea · gitea · CWE-284 | Kritik9,1 | — | %0,5 | 22 Oca 2026 |
17İzleyin | CVE-2026-20888İstismar yok | Gitea Pull Requests Auto-Merge: Read-Only Users Can Cancel Scheduled Auto-Merge via Web Endpoint (Authorization Bypass)gitea · gitea · CWE-284 | Orta4,3 | — | %0,3 | 22 Oca 2026 |
26İzleyin | CVE-2026-20883İstismar yok | Gitea Stopwatch API Missing Authorization Check Leads to Post-Revocation Information Disclosuregitea · gitea · CWE-284 | Orta6,5 | — | %0,4 | 22 Oca 2026 |
26İzleyin | CVE-2026-20800İstismar yok | Notification API Leaks Private Repository Issue Titles After Collaborator Permission Revocationgitea · gitea · CWE-200 | Orta6,5 | — | %0,4 | 22 Oca 2026 |
36İzleyin | CVE-2026-20750İstismar yok | Gitea Organization Projects Cross-Organization Authorization Bypass via Project ID (IDOR)gitea · gitea · CWE-284 | Kritik9,1 | — | %0,4 | 22 Oca 2026 |
30İzleyin | CVE-2026-20736İstismar yok | Gitea Web Attachment Deletion: Cross-Repository Unauthorized Deletion via Missing Repo Ownership Checkgitea · gitea · CWE-284 | Yüksek7,5 | — | %0,4 | 22 Oca 2026 |
14İzleyin | CVE-2026-0798İstismar yok | Gitea Release Email Notifications Leak Private Repository Release Details After Access Revocationgitea · gitea · CWE-284 | Düşük3,5 | — | %0,3 | 22 Oca 2026 |
- CVE-2026-2091236İzleyin
Gitea: Cross-Repository Authorization Bypass via Release Attachment Linking Leads to Private Attachment Disclosure
KritikCVSS 9,1İstismar yokEPSS %0gitea · gitea22 Oca 2026
- CVE-2026-2090426İzleyin
Gitea: Broken access control in OpenID visibility toggle enables cross-user visibility changes
OrtaCVSS 6,5İstismar yokEPSS %0gitea · gitea22 Oca 2026
- CVE-2026-2089736İzleyin
Gitea Git LFS Lock Deletion Broken Access Control (Cross-Repo IDOR)
KritikCVSS 9,1İstismar yokEPSS %0gitea · gitea22 Oca 2026
- CVE-2026-2088817İzleyin
Gitea Pull Requests Auto-Merge: Read-Only Users Can Cancel Scheduled Auto-Merge via Web Endpoint (Authorization Bypass)
OrtaCVSS 4,3İstismar yokEPSS %0gitea · gitea22 Oca 2026
- CVE-2026-2088326İzleyin
Gitea Stopwatch API Missing Authorization Check Leads to Post-Revocation Information Disclosure
OrtaCVSS 6,5İstismar yokEPSS %0gitea · gitea22 Oca 2026
- CVE-2026-2080026İzleyin
Notification API Leaks Private Repository Issue Titles After Collaborator Permission Revocation
OrtaCVSS 6,5İstismar yokEPSS %0gitea · gitea22 Oca 2026
- CVE-2026-2075036İzleyin
Gitea Organization Projects Cross-Organization Authorization Bypass via Project ID (IDOR)
KritikCVSS 9,1İstismar yokEPSS %0gitea · gitea22 Oca 2026
- CVE-2026-2073630İzleyin
Gitea Web Attachment Deletion: Cross-Repository Unauthorized Deletion via Missing Repo Ownership Check
YüksekCVSS 7,5İstismar yokEPSS %0gitea · gitea22 Oca 2026
- CVE-2026-079814İzleyin
Gitea Release Email Notifications Leak Private Repository Release Details After Access Revocation
DüşükCVSS 3,5İstismar yokEPSS %0gitea · gitea22 Oca 2026