CVE-2026-27657 | Gitea up to 1.25.4 Email Address authorization

July 4, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Gitea up to 1.25.4. The affected element is an unknown function of the component Email Address Handler. The manipulation results in authorization bypass.

This vulnerability is reported as CVE-2026-27657. The attack can be launched remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More