CVE-2026-120263 | Gitea up to 28.2.x Account Linking improper authentication

November 1, 2026 Yanac

A vulnerability was found in Gitea up to 28.2.x. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Account Linking. Such manipulation leads to improper authentication.

This vulnerability is listed as CVE-2026-120263. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More