CVE-2026-28744 | Gitea up to 1.26.1 HTTP Request authorization (GHSA-cc8w-r4qh-3v65)

July 4, 2026 Yanac

A vulnerability described as critical has been identified in Gitea up to 1.26.1. Affected is an unknown function of the component HTTP Request Handler. Executing a manipulation can lead to incorrect authorization.

This vulnerability is handled as CVE-2026-28744. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More