Gitea Docker Image <= 1.26.2 - Reverse Proxy Header Authentication Bypass

The official Gitea Docker image through version 1.26.2 ships with REVERSEPROXYTRUSTEDPROXIES set to a wildcard, causing Gitea to trust reverse-proxy authentication headers X-WEBAUTH-USER from any source IP instead of restricting trust to the configured reverse proxy. When reverse-proxy...

CVE-2026-20896

CVE-2026-20896 La imagen oficial de Docker de Gitea hasta la 1.26.2 inclusive incluye REVERSEPROXYTRUSTEDPROXIES = en su configuración por defecto. Si activas el inicio de sesión mediante proxy inverso, ese comodín significa que cada IP de origen se trata como un proxy de confianza, por lo que...

cve-2026-20896-gitea-poc

CVE-2026-20896 Comprobador de Omisión de Autenticación de Gitea Docker Solo para operaciones autorizadas de red team / pentest. Este repositorio contiene un comprobador mínimo para CVE-2026-20896, una omisión de autenticación en las imágenes oficiales de Gitea Docker hasta 1.26.2 inclusive cuando...

CVE-2026-20896

CVE-2026-20896: PoC de omisión de autenticación en la imagen Docker de Gitea !WARNING Usa este PoC solo en un laboratorio local o contra un sistema que estés autorizado explícitamente a probar. https://github.com/user-attachments/assets/b73af2fe-0e59-438b-80d6-be93fd75697b Resumen CVE-2026-20896 ...

Exploit for CVE-2026-20896

CVE-2026-20896: Gitea Docker Image Authentication Bypass PoC...

Exploit for CVE-2026-20896

CVE-2026-20896 - Gitea ≤1.26.2 Authentication Bypass 1. What...

CVE-2026-20896 — Updated!

CVE-2026-20896: Gitea Docker Image Authentication Bypass PoC !WARNING Use this PoC only in a local lab or against a system you are explicitly authorized to test. https://github.com/user-attachments/assets/b73af2fe-0e59-438b-80d6-be93fd75697b Overview CVE-2026-20896 is an authentication bypass in...

SUSE CVE-2026-20896

Gitea Docker image versions up to and including 1.26.2 use REVERSEPROXYTRUSTEDPROXIES= by default, allowing any source IP to impersonate a user when reverse-proxy authentication headers such as X-WEBAUTH-USER are enabled...

Exploit for CVE-2026-20896

CVE-2026-20896 Gitea Docker Auth Bypass Checker Authorized re...

Exploit for CVE-2026-20896

CVE-2026-20896 Gitea's official Docker image up to and inclu...

CVE-2026-20896: Improper Access Control

Gitea Docker image versions up to and including 1.26.2 use REVERSEPROXYTRUSTEDPROXIES= by default, allowing any source IP to impersonate a user when reverse-proxy authentication headers such as X-WEBAUTH-USER are enabled...

CVE-2026-25119: Authentication Bypass by Spoofing

Gogs is an open source self-hosted Git service. Prior to 0.14.3, when ENABLEREVERSEPROXYAUTHENTICATION is enabled, Gogs accepts the configured authentication header default: X-WEBAUTH-USER directly from client requests without validating that the request originated from a trusted reverse proxy. A...

CVE-2025-46341: Server-Side Request Forgery (SSRF)

FreshRSS is a self-hosted RSS feed aggregator. Prior to version 1.26.2, when the server is using HTTP auth via reverse proxy, it's possible to impersonate any user either via the Remote-User header or the X-WebAuth-User header by making specially crafted requests via the add feed functionality an...

grafana: Escalation from admin to server admin when auth proxy is used

A flaw was found in the grafana package. Auth proxy allows authentication of a user by only providing the username or email in an X-WEBAUTH-USER HTTP header. The trust assumption is that a front proxy will take care of authentication and that the Grafana server is only publicly reachable with thi...

CVE-2022-35957

A flaw was found in the grafana package. Auth proxy allows authentication of a user by only providing the username or email in an X-WEBAUTH-USER HTTP header. The trust assumption is that a front proxy will take care of authentication and that the Grafana server is only publicly reachable with thi...