PT-2026-63290

CVE-2026-58314

Published

2026-07-13

Updated

2026-08-26

Description by

CVSS 3.1

7.7

High

MetricsAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Gitea version 1.26.2

Description The software contains two Server-Side Request Forgery (SSRF) issues. SSRF is a flaw that allows an attacker to induce the server-side application to make requests to an unintended location, potentially accessing internal resources or bypassing network restrictions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Xclow3N

Vendors

Affected products

Weakness enumeration

CWE-682: Incorrect Calculation

CWE-918: Server-Side Request Forgery (SSRF)

Related identifiers