Exploit for CVE-2026-20896

CVE-2026-20896 Gitea Docker Auth Bypass Checker Authorized re...

Exploit for CVE-2026-20896

CVE-2026-20896 Gitea's official Docker image up to and inclu...

CVE-2026-20896 Gitea Docker image trusts spoofable reverse-proxy headers by default

Gitea Docker image versions up to and including 1.26.2 use REVERSEPROXYTRUSTEDPROXIES= by default, allowing any source IP to impersonate a user when reverse-proxy authentication headers such as X-WEBAUTH-USER are enabled...

CVE-2026-20896

creationtimestamp| type| source ---|---|--- 2026-06-26 04:52:06+00:00| seen| https://bsky.app/profile/thecybersecguru.com/post/3mp65jcs6sh27 2026-06-30 06:11:34+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3mpidt76pcsbr 2026-06-30 06:11:36+00:00| seen|...