1114 matches found
EUVD-2026-116583
An out-of-bounds read vulnerability was identified in GitHub Enterprise Server in the Git service babeld. When proving possession of a host key, babeld's SSH implementation sized the session identifier by the current digest length rather than its own. An attacker with an account and SSH access...
EUVD-2026-116581
A remote code execution vulnerability was identified in GitHub Enterprise Server in the Git service babeld. babeld held references into internal collections while calling into the SSH library, where a re-entrant callback could modify a collection and invalidate those references. An attacker with ...
EUVD-2026-116582
A cross-site request forgery vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to delete stored Slack and Microsoft Teams ChatOps configuration and provider credentials by inducing an authenticated Management Console operator's browser to send a...
CVE-2026-118237
An out-of-bounds read vulnerability was identified in GitHub Enterprise Server in the Git service babeld. When proving possession of a host key, babeld's SSH implementation sized the session identifier by the current digest length rather than its own. An attacker with an account and SSH access...
CVE-2026-110288
A cross-site request forgery vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to delete stored Slack and Microsoft Teams ChatOps configuration and provider credentials by inducing an authenticated Management Console operator's browser to send a...
CVE-2026-104608
A remote code execution vulnerability was identified in GitHub Enterprise Server in the Git service babeld. babeld held references into internal collections while calling into the SSH library, where a re-entrant callback could modify a collection and invalidate those references. An attacker with ...
CVE-2026-118237
An out-of-bounds read vulnerability exists in the GitHub Enterprise Server Git service (babeld ). The flaw occurs because the babeld SSH implementation incorrectly sizes the session identifier by the current digest length instead of its own length during host key possession proofs. An attacker wi...
CVE-2026-118237 Out-of-bounds read vulnerability in GitHub Enterprise Server allowed disclosure of process memory in the Git service
An out-of-bounds read vulnerability was identified in GitHub Enterprise Server in the Git service babeld. When proving possession of a host key, babeld's SSH implementation sized the session identifier by the current digest length rather than its own. An attacker with an account and SSH access...
CVE-2026-110288 Cross-site request forgery vulnerability in GitHub Enterprise Server allowed deletion of stored ChatOps configuration through the Management Console
A cross-site request forgery vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to delete stored Slack and Microsoft Teams ChatOps configuration and provider credentials by inducing an authenticated Management Console operator's browser to send a...
CVE-2026-110288
A cross-site request forgery (CSRF) vulnerability exists in GitHub Enterprise Server (versions prior to 3.23) due to a missing CSRF token on the integration removal endpoint. An unauthenticated attacker can induce an authenticated Management Console operator's browser to send a cross-site GET req...
CVE-2026-104608
A remote code execution vulnerability exists in the Git service (babeld) of GitHub Enterprise Server . The issue stems from a use-after-free condition where babeld held references to internal collections while calling the SSH library; a re-entrant callback could then modify and invalidate those r...
CVE-2026-104608 Use-after-free vulnerability in GitHub Enterprise Server allowed remote code execution in the Git service
A remote code execution vulnerability was identified in GitHub Enterprise Server in the Git service babeld. babeld held references into internal collections while calling into the SSH library, where a re-entrant callback could modify a collection and invalidate those references. An attacker with ...
CVE-2026-104608: GitHub Enterprise Server: A remote code execution vulnerability was identified in GitHub Enterprise Server in the Git service (babeld)
A remote code execution vulnerability was identified in GitHub Enterprise Server in the Git service babeld. babeld held references into internal collections while calling into the SSH library, where a re-entrant callback could modify a collection and invalidate those references. An attacker with ...
CVE-2026-118237: GitHub Enterprise Server: An out-of-bounds read vulnerability was identified in GitHub Enterprise Server in the Git service (babeld)
An out-of-bounds read vulnerability was identified in GitHub Enterprise Server in the Git service babeld. When proving possession of a host key, babeld's SSH implementation sized the session identifier by the current digest length rather than its own. An attacker with an account and SSH access...
PT-2026-136704
A remote code execution vulnerability was identified in GitHub Enterprise Server in the Git service babeld. babeld held references into internal collections while calling into the SSH library, where a re-entrant callback could modify a collection and invalidate those references. An attacker with ...
PT-2026-136706
A cross-site request forgery vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to delete stored Slack and Microsoft Teams ChatOps configuration and provider credentials by inducing an authenticated Management Console operator's browser to send a...
CVE-2026-110288: GitHub Enterprise Server: A cross-site request forgery vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated…
A cross-site request forgery vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to delete stored Slack and Microsoft Teams ChatOps configuration and provider credentials by inducing an authenticated Management Console operator's browser to send a...
PT-2026-136707
An out-of-bounds read vulnerability was identified in GitHub Enterprise Server in the Git service babeld. When proving possession of a host key, babeld's SSH implementation sized the session identifier by the current digest length rather than its own. An attacker with an account and SSH access...
ghe-push-option-rce-scanner
CVE-2026-3854 — GitHub Enterprise Server RCE via Push Option Injection Overview Improper neutralization of push option values in GHE. Attacker with push access achieves RCE on the instance. Field| Value ---|--- CVE| CVE-2026-3854 Severity| CRITICAL Product| GitHub Enterprise Server CISA KEV|...
CVE-2024-0507_CVE-2024-0200-github
Intro This repository contains exploits we have developed for GitHub Enterprise vulnerabilities CVE-2024-0507 and CVE-2024-0200. Check out the full writeup at https://blog.convisoappsec.com/en/analysis-of-github-enterprise-vulnerabilities-cve-2024-0507-cve-2024-0200/ CVE-2024-0507 Privilege...