Lucene search
+L

Exploit for CVE-2026-28699

🗓️ 11 Jun 2026 02:23:10Reported by AlardiiansType 
githubexploit
 githubexploit
🔗 github.com👁 176 Views

CVE-2026-28699: An OAuth2 read:user token can write via HTTP Basic auth, bypassing scope.

Related
ReporterTitlePublishedViews
Family
attackerkb
attackerkb
CVE-2026-28699
3 Jul 202620:19
–attackerkb
bdu_fstec
BDU FSTEC
Gitea Privilege Escalation
31 Jul 202600:00
–bdu_fstec
circl
Circl
CVE-2026-28699
5 Jun 202622:22
–circl
cve
CVE
CVE-2026-28699
3 Jul 202620:19
–cve
cvelist
Cvelist
CVE-2026-28699 Gitea Basic Auth bypasses OAuth2 access token scopes
3 Jul 202620:19
–cvelist
euvd
EUVD
EUVD-2026-41640
3 Jul 202620:19
–euvd
freebsd
FreeBSD
gitea -- multiple vulnerabilities
20 May 202600:00
–freebsd
nessus
Tenable Nessus
FreeBSD : gitea -- multiple vulnerabilities (f00e2de8-7d30-48d2-a43d-68206347dea6)
29 Jun 202600:00
–nessus
github
Github Security Blog
Gitea: OAuth2 access token scope enforcement bypass via HTTP Basic authentication
16 Jun 202623:40
–github
kitploit
Kitploit
gitea-CVE-2026-28699
19 Oct 202602:06
–kitploit
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

11 Jun 2026 02:29Current
7.8High risk
Vulners AI Score7.8
EPSS0.00551
176