CVE-2026-56654

Privilege Escalation via Access Token Scope Escalation in API...

CVE-2026-56654 Privilege Escalation via Access Token Scope Escalation in API

Privilege Escalation via Access Token Scope Escalation in API...

CVE-2026-56654 Privilege Escalation via Access Token Scope Escalation in API

Privilege Escalation via Access Token Scope Escalation in API...

CVE-2026-56654

CVE-2026-56654 describes a privilege-escalation in Gitea via API access token scope escalation. The root cause is twofold: (1) an API path that creates new tokens does not enforce a ceiling on requested scopes relative to the caller’s own token scopes, and (2) a token supplied via HTTP Basic auth...

CVE-2026-56654 Privilege Escalation via Access Token Scope Escalation in API

Privilege Escalation via Access Token Scope Escalation in API...

EUVD-2026-56654

Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally...

SUSE CVE-2026-56654

unknown...

CVE-2026-56654

creationtimestamp| type| source ---|---|--- 2026-07-21 21:08:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6ppnqxbj2r 2026-07-21 22:36:25+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-683j-3ff6-hh2x...