ghe-push-option-rce-scanner

CVE-2026-3854 — 푸시 옵션 인젝션을 통한 GitHub Enterprise Server RCE 개요 GHE에서 푸시 옵션 값에 대한 부적절한 중화. 푸시 접근 권한이 있는 공격자가 인스턴스에서 RCE를 달성할 수 있습니다. 필드| 값 ---|--- CVE| CVE-2026-3854 심각도| CRITICAL 제품| GitHub Enterprise Server CISA KEV| 2026-03-10 공격 유형| 푸시 옵션 인젝션을 통한 RCE 인증 필요| 없음 영향을 받는 버전 상태| 버전 ---|--- ❌ 취약|...

CVE-2026-3854-PoC

CVE-2026-3854 PoC — X-Stat 푸시 옵션 주입을 통한 GitHub RCE 교육 및 인가된 보안 연구 목적으로만 사용하십시오. 명시적인 서면 허가 없이 어떤 시스템에도 사용하지 마십시오. 개요 CVE-2026-3854 는 GitHub Enterprise Server및 GitHub.com의 git push 파이프라인에서 발생하는 원격 코드 실행RCE 취약점입니다. 클라이언트가 푸시 옵션git push -o을 제공하면 GitHub의 내부 Ruby 코드는 각 옵션 값을 세미콜론으로 연결하여 X-Stat 헤더를...

Exploit for Command Injection in Github Enterprise_Server

CVE-2026-3854 - GitHub Enterprise Server that allowed an Remot...

Exploit for Command Injection in Github Enterprise_Server

CVE-2026-3854 — GitHub Enterprise Server RCE via Push Option I...

Exploit for Command Injection in Github Enterprise_Server

CVE-2026-3854 PoC — GitHub RCE via X-Stat Push Option Injectio...

CVE-2026-3854 Remote code execution via git push option injection in GitHub Enterprise Server

An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed an attacker with push access to a repository to achieve remote code execution on the instance. During a git push operation, user-supplied push option values were not properly...

CVE-2026-3854 Remote code execution via git push option injection in GitHub Enterprise Server

An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed an attacker with push access to a repository to achieve remote code execution on the instance. During a git push operation, user-supplied push option values were not properly...

CVE-2026-3854: Improper Neutralization of Special Elements used in a Command

An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed an attacker with push access to a repository to achieve remote code execution on the instance. During a git push operation, user-supplied push option values were not properly...

GitHub Enterprise Server 安全漏洞

GitHub Enterprise Server is an open-source application developed by GitHub in the United States. It provides a scalable and easy-to-manage platform by allowing users to set their GitHub instances as virtual devices. Vulnerabilities exist in versions 3.14.24, 3.15.19, 3.16.15, 3.17.12, 3.18.6, and...