CVE-2026-72741 Rainbond 6.9.7 Region API Cross-Enterprise IDOR via Tenant Access

Rainbond through 6.9.7 contains a broken access control vulnerability in the CheckToken function that allows authenticated attackers to access unauthorized enterprise resources by substituting another enterprise's tenant name in URL paths. Attackers can use any valid API token to bypass enterpris...

CVE-2026-73645

OpenZeppelin Confidential Contracts ERC7984 wrapper contains a defect prior to 0.3.1 where an overflowing internal _mint on the ERC7984ERC20Wrapper could silently fail. The wrap and onTransferReceived paths did not handle this failure, allowing a user to transfer the underlying token without rece...

CVE-2026-58444

Personal access token scope enforcement bypass on the repository home page GET /owner/repo discloses private repository contents...

CVE-2026-58431

Public-only API token restriction is not enforced on team API routes...

CVE-2026-58425

OAuth token introspection returns metadata of tokens issued to other clients RFC 7662 section 4 violation...

CVE-2026-58429

Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints...

CVE-2026-56750

Gitea Remember-Me Token Theft Not Invalidating Attacker Session...

CVE-2026-56654

Privilege Escalation via Access Token Scope Escalation in API...

CVE-2026-55982

OIDC userinfo Endpoint Returns Identity Claims Without Enforcing API Token Scopes...

CVE-2026-50105

RSS/Atom feed handlers bypass API-token scope & public-only confinement incomplete fix of 37698...

CVE-2026-24059

The GET /api/v1/user/actions/runners/registration-token endpoint and its owner- and repository-level equivalents creates a new runner registration token if none exists, yet the API scope middleware classifies it as read-only because it is a GET request. A holder of a leaked read:user-scoped token...

CVE-2022-4993

HTML::FormHandler versions before 0.410000 for Perl allow attacker selected method dispatch and resource exhaustion because applyactions and adderror use error message text built from request data as a Locale::Maketext bracket notation template. adderror hands its first argument to the language...

CVE-2026-24059 Gitea runner registration-token GET endpoint performs a write under a read-only token scope

The GET /api/v1/user/actions/runners/registration-token endpoint and its owner- and repository-level equivalents creates a new runner registration token if none exists, yet the API scope middleware classifies it as read-only because it is a GET request. A holder of a leaked read:user-scoped token...

EUVD-2026-58128

The GET /api/v1/user/actions/runners/registration-token endpoint and its owner- and repository-level equivalents creates a new runner registration token if none exists, yet the API scope middleware classifies it as read-only because it is a GET request. A holder of a leaked read:user-scoped token...

CVE-2026-24059

The Gitea Actions runner registration-token endpoint (specifically GET /api/v1/user/actions/runners/registration-token and its owner/repository equivalents) incorrectly performs a write operation by creating a new registration token if none exists. Because it uses a GET request, the API scope mid...

CVE-2026-24791 Public-only tokens bypass private-resource restrictions on `/api/v1/user` self routes

Public-only tokens bypass private-resource restrictions on /api/v1/user self routes...

EUVD-2026-58127

Public-only tokens bypass private-resource restrictions on /api/v1/user self routes...

CVE-2026-24791 Public-only tokens bypass private-resource restrictions on `/api/v1/user` self routes

Public-only tokens bypass private-resource restrictions on /api/v1/user self routes...

CVE-2026-24791

The Gitea Git repository management system is affected by an incorrect authorization vulnerability (CVE-2026-24791 ). The root cause is that public-only tokens can be used to bypass private-resource restrictions on /api/v1/user self routes. Successful exploitation allows an attacker to increase t...

CVE-2026-58444

The Git repository management system Gitea is affected by a personal access token scope enforcement bypass on the repository home page (GET /{owner}/{repo}). This vulnerability is caused by a lack of access control, which could allow a malicious actor to expose protected information or private re...