CVE-2026-73535 | Gitea up to 1.27.1 OpenID Connect improper authentication

October 14, 2026 Yanac

A vulnerability has been found in Gitea up to 1.27.1 and classified as critical. Impacted is an unknown function of the component OpenID Connect. Performing a manipulation results in improper authentication.

This vulnerability is cataloged as CVE-2026-73535. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More