CVE-2026-116296 | Gitea up to 28.2.x API Routes privileges management

November 1, 2026 Yanac

A vulnerability identified as problematic has been detected in Gitea up to 28.2.x. This vulnerability affects unknown code of the component API Routes. The manipulation leads to improper privilege management.

This vulnerability is documented as CVE-2026-116296. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More