CVE-2026-26292 | Gitea up to 1.25.4 access control

July 4, 2026 Yanac

A vulnerability identified as critical has been detected in Gitea up to 1.25.4. This issue affects some unknown processing. The manipulation leads to improper access controls.

This vulnerability is traded as CVE-2026-26292. It is possible to initiate the attack remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More