CVE-2026-107618 | Gitea up to 28.1.0 Middleware cross-domain policy

October 18, 2026 Yanac

A vulnerability, which was classified as problematic, was found in Gitea up to 28.1.0. This issue affects some unknown processing of the component Middleware. Such manipulation leads to permissive cross-domain policy with untrusted domains.

This vulnerability is listed as CVE-2026-107618. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More