Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was determined in theonedev onedev up to 15.0.5. This affects an unknown part of the file /repositories/{projectId}/default-branch of the component REST API. This manipulation of the argument project.defaultBranch causes improper authorization. It is possible to initiate the attack remotely. Upgrading to version 15.0.6 is able to mitigate this issue. Upgrading the affected component is advised.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2026-11440 A vulnerability was determined in theonedev onedev up to 15.0.5. This affects an unknown part of the file /repositories/{projectId}/default-branch of the component RE… https://www.cve.org/CVERecord?id=CVE-2026-11440
Post summary
The post announces a discovered vulnerability in TheOneDev up to version 15.0.5, but provides no technical details, PoC, or exploitation evidence.
CVE-2026-11440 Improper Authorization in onedev REST API Default Branch ... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-11440 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
The tweet references CVE-2026-11440 and links to a vulnerability details page, but offers no proof of concept, exploit code, patch information, or evidence of active use.