CVE-2026-3306

creationtimestamp| type| source ---|---|--- 2026-07-27 10:00:04+00:00| seen| Telegram/kn38l-BAxVCicUp4xeVlmwdfqsYeVojoIvsltdH6OF8az4 2026-07-28 00:00:38+00:00| published-proof-of-concept| Telegram/kn38l-BAxVCicUp4xeVlmwdfqsYeVojoIvsltdH6OF8az4...

CVE-2026-3306

An improper authorization vulnerability was identified in GitHub Enterprise Server that allowed a user with read access to a repository and write access to a project to modify issue and pull request metadata through the project. When adding an item to a project that already existed, column value...