CVE-2026-119627 | Gitea up to 28.2.x Web Profile And RSS/Atom Feed Routes access control

November 1, 2026 Yanac

A vulnerability identified as problematic has been detected in Gitea up to 28.2.x. Affected by this vulnerability is an unknown functionality of the component Web Profile And RSS/Atom Feed Routes. Performing a manipulation results in improper access controls.

This vulnerability is reported as CVE-2026-119627. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More