VULNERABILITY INTELLIGENCE
CVE-2026-26231
CVSS score8.5 HIGH
EPSS probability0.36%
CISA KEVNot currently listed
Published2026-07-03
Last modified2026-10-25
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N
Description
Gitea versions up to and including 1.26.1 allow the Allow edits from maintainers permission path to authorize commits to repositories that the user can read but should not be able to write.
Weakness classification
- CWE-863: Incorrect Authorization