CVE-2026-118504 | Gitea up to 28.2.x REST API privileges management

November 1, 2026 Yanac

A vulnerability classified as problematic was found in Gitea up to 28.2.x. This affects an unknown function of the component REST API. Executing a manipulation can lead to improper privilege management.

This vulnerability is handled as CVE-2026-118504. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More