CVE-2026-58443

CVE-2026-58443 (Gitea) : Public-only repository tokens can update private PR head branches via a public route. The root cause is that the update flow uses ordinary RBAC on the head repository (push/merge to the PR head) without reapplying the token’s public-only constraint to the private head rep...

CVE-2026-58438 Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access

Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access...

CVE-2026-58438

CVE-2026-58438 concerns Gitea: a Cross-repository IDOR in issue-dependency removal. The root cause is that RemoveDependency fetches the dependency by ID and deletes the relation, with no cross-repo permission check, potentially allowing an attacker to delete an issue dependency and append a remov...

CVE-2026-58438 Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access

Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access...

CVE-2026-58438 Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access

Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access...

CVE-2026-58434

CVE-2026-58434 affects Gitea: Private Repository Metadata Remains Accessible After Access Revocation. Demonstrated in public advisories with a PoC reference (GHSA-j2w3-9c3r-g83q) and linked to the Gitea 1.27.0 release. Affected software is Gitea (go-gitea) and related deployments prior to the fix...

CVE-2026-58434 Private Repository Metadata Remains Accessible After Access Revocation

Private Repository Metadata Remains Accessible After Access Revocation...

CVE-2026-58417 REST API exposes organization membership of private organizations to public

REST API exposes organization membership of private organizations to public...

CVE-2026-58417 REST API exposes organization membership of private organizations to public

REST API exposes organization membership of private organizations to public...

CVE-2026-58417

The CVE-2026-58417 issue affects Gitea: the REST API endpoint /orgs/{org}/public_members/{username} leaks organization membership of private orgs to public. According to the sources, an authenticated user can probe membership of a user in a private org and receive a response (PoC shows HTTP 204) ...

CVE-2026-58416

CVE-2026-58416 (Gitea) describes a read-access leak in the Fork-PR Actions path: when a private repo B lists A as a collaborative owner, GetActionsUserRepoPermission on the collaborative-owner branch returns code-read permissions even if the fork PR is involved, enabling an attacker to clone a th...

CVE-2026-58416 Fork-PR Actions task can read a third private repository via the collaborative-owner branch (missing fork-PR guard)

Fork-PR Actions task can read a third private repository via the collaborative-owner branch missing fork-PR guard...

CVE-2026-58416 Fork-PR Actions task can read a third private repository via the collaborative-owner branch (missing fork-PR guard)

Fork-PR Actions task can read a third private repository via the collaborative-owner branch missing fork-PR guard...

EUVD-2026-58151

Fork-PR Actions task can read a third private repository via the collaborative-owner branch missing fork-PR guard...

CVE-2026-57886

CVE-2026-57886 affects Gitea (Go) and is described as a cross-repository issue where re-linking of attachments for issues/comments can expose private attachment content. The CVE notes a high confidentiality impact (C) with network attack vector, high exploitability due to low privileges and no us...

EUVD-2026-57920

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA ECC private key requests ccaecc2protkey derives the copy length for the CPRB parameter block directly from the length field in the key token. Reject the request early if the token length excee...

CVE-2026-68451

The CVE-2026-68451 issue affects the Linux kernel s390 zcrypt module. The cca_ecc2protkey() function derives the CPRB copy length from the key token’s length field and now rejects requests where the token length exceeds the available space in the parameter block, addressing a memory-corruption ri...

CVE-2026-68451 s390/zcrypt: Validate length for CCA ECC private key requests

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA ECC private key requests ccaecc2protkey derives the copy length for the CPRB parameter block directly from the length field in the key token. Reject the request early if the token length excee...

Kibana 8.19.20 and 9.4.5 Security Update (ESA-2026-87)

Exposure of Sensitive Information to an Unauthorized Actor in Kibana Leading to Disclosure of Fleet Proxy Credentials A lower privileged user who holds only the privilege to read agent policies can read the entire configuration of a configured Fleet proxy. This would normally require the Fleet...

Kibana 8.19.20, and 9.4.4 Security Update (ESA-2026-90)

Incorrect Authorization in Kibana Leading to Unauthorized Deletion of Synthetics Private Locations Description: Incorrect Authorization CWE-863 in Kibana can lead to unauthorized deletion of Synthetics private locations via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1...