CVE-2026-19746

A vulnerability has been found in Calix GigaSpire 26.1.0. The affected element is an unknown function of the file traceroute.cmd. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contact...

CVE-2026-19746

Calix GigaSpire 26.1.0 contains a vulnerability in the traceroute.cmd file where an unknown function can be manipulated to cause a denial of service. The issue can be triggered remotely, with public disclosure of the exploit. No remediation details are provided in the supplied documents. The vend...

CVE-2026-19746 Calix GigaSpire traceroute.cmd denial of service

A vulnerability has been found in Calix GigaSpire 26.1.0. The affected element is an unknown function of the file traceroute.cmd. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contact...

CVE-2026-58510

GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public-private...

CVE-2026-58429

Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints...

CVE-2026-50105

RSS/Atom feed handlers bypass API-token scope & public-only confinement incomplete fix of 37698...

CVE-2026-24791

Public-only tokens bypass private-resource restrictions on /api/v1/user self routes...

EUVD-2026-58123

GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public-private...

CVE-2026-58510 GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public->private

GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public-private...

CVE-2026-58510

The CVE-2026-58510 entry relates to Gitea: the ClearRepoWatches fix was not applied to the API EditRepo path, leaving a secondary code path with stale watches when a repository’s visibility changes from public to private. Affected software: Gitea; vulnerable component: the API EditRepo/watch hand...

CVE-2026-58443 Public-only repository tokens can update private PR head branches

Public-only repository tokens can update private PR head branches...

CVE-2026-58443 Public-only repository tokens can update private PR head branches

Public-only repository tokens can update private PR head branches...

CVE-2026-58443

CVE-2026-58443 (Gitea) : Public-only repository tokens can update private PR head branches via a public route. The root cause is that the update flow uses ordinary RBAC on the head repository (push/merge to the PR head) without reapplying the token’s public-only constraint to the private head rep...

CVE-2026-58431 Public-only API token restriction is not enforced on team API routes

Public-only API token restriction is not enforced on team API routes...

CVE-2026-58417

The CVE-2026-58417 issue affects Gitea: the REST API endpoint /orgs/{org}/public_members/{username} leaks organization membership of private orgs to public. According to the sources, an authenticated user can probe membership of a user in a private org and receive a response (PoC shows HTTP 204) ...

CVE-2026-50105 RSS/Atom feed handlers bypass API-token scope & public-only confinement (incomplete fix of #37698)

RSS/Atom feed handlers bypass API-token scope & public-only confinement incomplete fix of 37698...

CVE-2026-50105

RSS/Atom feed handlers bypass API-token scope & public-only confinement incomplete fix of 37698...

CVE-2026-50105 RSS/Atom feed handlers bypass API-token scope & public-only confinement (incomplete fix of #37698)

RSS/Atom feed handlers bypass API-token scope & public-only confinement incomplete fix of 37698...

CVE-2026-19710

A vulnerability was found in SourceCodester Simple Student Information System. Affected by this vulnerability is an unknown functionality of the file app/admin/departments/viewdepartment.php. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be carri...

CVE-2026-19710 SourceCodester Simple Student Information System view_department.php sql injection

A vulnerability was found in SourceCodester Simple Student Information System. Affected by this vulnerability is an unknown functionality of the file app/admin/departments/viewdepartment.php. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be carri...