CVE-2026-26232General

LOWCVSS 9.1 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Gitea versions before 1.25.5 do not consistently enforce OAuth2 authorization code expiry and single-use behavior during token exchange.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-294

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

General: 1 classified signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

General

1100.0%

Referenced assets1 URL

By indicator

https://www.cybernote.click/2026/07/11/cve-2026-26232-gitea-1255/

Full discourse1 post

ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker93d
General
【緊急】CVE-2026-26232 Gitea 1.25.5以前に深刻な脆弱性｜即時対応が必要 https://www.cybernote.click/2026/07/11/cve-2026-26232-gitea-1255/ #IT #Security #cybersecurity
Post summary
An urgent announcement warns of a critical vulnerability in Gitea versions before 1.25.5, but it provides no further technical details, exploit info, or remediation guidance.
0000039
208 followersView on X

Explore more

Back to dashboard