CVE-2026-25782 Gitea tracked-time deletion can target entries from another issue

Gitea versions before 1.25.5 look up tracked-time entries by time ID without scoping the lookup to the issue in the request URL, allowing deletion attempts to target entries from another issue...

CVE-2026-25782 Gitea tracked-time deletion can target entries from another issue

Gitea versions before 1.25.5 look up tracked-time entries by time ID without scoping the lookup to the issue in the request URL, allowing deletion attempts to target entries from another issue...

CVE-2026-20779 Gitea TOTP single-use enforcement defect allows OTP replay

Gitea versions from 1.5.0 before 1.26.3 have a TOTP single-use enforcement defect that allows a valid TOTP code to be accepted more than once across web two-factor authentication flows and the Basic Auth X-Gitea-OTP path...

CVE-2026-20909 Gitea tracked-time list endpoint has insufficient permission checks

Gitea versions before 1.25.5 have insufficient permission checks when listing tracked time entries...

CVE-2026-20909 Gitea tracked-time list endpoint has insufficient permission checks

Gitea versions before 1.25.5 have insufficient permission checks when listing tracked time entries...

CVE-2026-20909 Gitea tracked-time list endpoint has insufficient permission checks

Gitea versions before 1.25.5 have insufficient permission checks when listing tracked time entries...

CVE-2026-20779

Gitea versions from 1.5.0 before 1.26.3 have a TOTP single-use enforcement defect that allows a valid TOTP code to be accepted more than once across web two-factor authentication flows and the Basic Auth X-Gitea-OTP path...

CVE-2026-20779

Gitea prior to 1.26.3 (versions from 1.5.0 up to

CVE-2026-20909

Gitea versions before 1.25.5 have insufficient permission checks when listing tracked time entries...

CVE-2026-20909

Gitea versions before 1.25.5 are vulnerable to an Access Control Bypass due to insufficient permission checks when listing tracked time entries. An attacker can access private time tracking information without proper authorization by sending crafted requests to the tracked-time list endpoint. Thi...

EUVD-2026-41615

Gitea versions before 1.25.5 have insufficient permission checks when listing tracked time entries...

CVE-2026-20779 Gitea TOTP single-use enforcement defect allows OTP replay

Gitea versions from 1.5.0 before 1.26.3 have a TOTP single-use enforcement defect that allows a valid TOTP code to be accepted more than once across web two-factor authentication flows and the Basic Auth X-Gitea-OTP path...

CVE-2026-46464

creationtimestamp| type| source ---|---|--- 2026-07-03 17:51:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpr4dxghxb2z 2026-07-04 06:38:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpsh6gpyes2n...

CVE-2026-59234

creationtimestamp| type| source ---|---|--- 2026-07-03 14:41:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpqrpeabqu2l 2026-07-04 04:11:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mps6yxxuv723...

Chromium: CVE-2026-14015 Inappropriate implementation in WebRTC

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Edge for Android Remote Code Execution Vulnerability

Time-of-check time-of-use toctou race condition in Microsoft Edge for Android allows an unauthorized attacker to execute code over a network...

CVE-2026-56369

creationtimestamp| type| source ---|---|--- 2026-07-03 11:25:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqgrdc3lt2n...

CVE-2026-35159

creationtimestamp| type| source ---|---|--- 2026-07-03 10:50:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpqethfskr2w 2026-07-03 22:57:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprnhjkfvn2f 2026-07-03 23:48:46+00:00| seen|...

Exploit for CVE-2026-11387

CVE-2026-11387 — SMS Alert = 3.9.5 ☆ Unauthenticated Privilege...

CVE-2026-9180

creationtimestamp| type| source ---|---|--- 2026-07-03 06:05:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppuv4hsmw2l 2026-07-03 20:51:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprgfdtgfl2c...