CVE-2026-58428 | Gitea up to 1.26.4 Release attachment extension privileges management

August 13, 2026 Yanac

A vulnerability marked as critical has been reported in Gitea up to 1.26.4. This issue affects some unknown processing of the component Release attachment extension. This manipulation causes improper privilege management.

This vulnerability is handled as CVE-2026-58428. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More