CVE-2026-123002 | Gitea up to 28.3.x Password Reset password recovery

November 15, 2026 Yanac

A vulnerability was found in Gitea up to 28.3.x and classified as critical. Affected is an unknown function of the component Password Reset. Such manipulation leads to weak password recovery.

This vulnerability is documented as CVE-2026-123002. The attack can be executed remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More