CVE-2026-20896

CVE-2026-20896: Gitea Docker イメージ認証バイパス PoC !WARNING この PoC はローカルラボまたは明示的にテストを許可されたシステムでのみ使用してください。 https://github.com/user-attachments/assets/b73af2fe-0e59-438b-80d6-be93fd75697b 概要 CVE-2026-20896 は、影響を受ける公式 Gitea Docker イメージにおける認証バイパスです。リバースプロキシ認証が有効な場合、イメージが生成する REVERSEPROXYTRUSTEDPROXIES =...

CVE-2026-20896

CVE-2026-20896 Gitea의 공식 Docker 이미지1.26.2까지는 기본 설정으로 REVERSEPROXYTRUSTEDPROXIES = 를 포함하고 있습니다. 리버스 프록시 로그인을 활성화하면 와일드카드로 인해 모든 소스 IP가 신뢰되는 프록시로 간주되어, 해당 포트에 접근 가능한 누구나 X-WEBAUTH-USER 헤더를 보내 원하는 사용자로 로그인할 수 있습니다. 비밀번호나 토큰이 필요 없습니다. 이 문제를 Gitea에 보고했으며, 1.26.3 / 1.26.4에서 수정되었습니다. 이 저장소는 제가 직접 작성한 분석...

CVE-2026-20896 — Updated!

CVE-2026-20896: Gitea Docker Image Authentication Bypass PoC !WARNING Use this PoC only in a local lab or against a system you are explicitly authorized to test. https://github.com/user-attachments/assets/b73af2fe-0e59-438b-80d6-be93fd75697b Overview CVE-2026-20896 is an authentication bypass in...

Exploit for CVE-2026-20896

CVE-2026-20896 Gitea's official Docker image up to and inclu...

CVE-2026-20896 Gitea Docker image trusts spoofable reverse-proxy headers by default

Gitea Docker image versions up to and including 1.26.2 use REVERSEPROXYTRUSTEDPROXIES= by default, allowing any source IP to impersonate a user when reverse-proxy authentication headers such as X-WEBAUTH-USER are enabled...

PT-2026-51429

Name of the Vulnerable Software and Affected Versions Gogs versions prior to 0.14.3 Description When ENABLE REVERSE PROXY AUTHENTICATION is enabled, Gogs accepts the configured authentication header default: X-WEBAUTH-USER directly from client requests without validating that the request originat...

CVE-2025-46341: Server-Side Request Forgery (SSRF)

FreshRSS is a self-hosted RSS feed aggregator. Prior to version 1.26.2, when the server is using HTTP auth via reverse proxy, it's possible to impersonate any user either via the Remote-User header or the X-WebAuth-User header by making specially crafted requests via the add feed functionality an...