CVE-2026-11441Disclosure

LOWCVSS 5.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was identified in theonedev onedev up to 15.0.5. This vulnerability affects the function canAccessIssue of the file /issues/ of the component Pull Request Handler. Such manipulation of the argument issue leads to improper authorization. It is possible to launch the attack remotely. Upgrading to version 15.0.6 is able to resolve this issue. It is advisable to upgrade the affected component.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-266CWE-285

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-06-06); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-06-06: 1Mentions · 2026-06-07: 1Technical Details · 2026-06-06: 1Technical Details · 2026-06-07: 106-0606-07
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-11441 A vulnerability was identified in theonedev onedev up to 15.0.5. This vulnerability affects the function canAccessIssue of the file /issues/ of the component Pull Req… https://www.cve.org/CVERecord?id=CVE-2026-11441

    Post summary

    The passage reports the disclosure of CVE-2026-11441, detailing its impact on theonedev's canAccessIssue function in versions up to 15.0.5, without mentioning PoCs, exploits, or patches.

    00000169
    57.6K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-11441 Improper Authorization in Onedev Pull Request Handler Versions Below 15.0.6 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-11441

    Post summary

    CVE-2026-11441 is an improper authorization flaw affecting Onedev Pull Request Handler versions below 15.0.6. The text provides only the CVE name, a brief description, and a link, with no discussion of PoC, exploit code, patches, or active exploitation.

    0000034
    4.0K followersView on X

Explore more