CVE-2026-26247General

LOWCVSS 9.1 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Gitea versions before 1.25.5 do not persist the OAuth2 PKCE S256 challenge method correctly during authorization, allowing token exchange without the expected verifier check.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-284

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

General: 2 classified signals
Peaked 1d ago at 1 mentions (2026-07-16); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

General

2100.0%

Referenced assets1 URL

By indicator

https://www.cybernote.click/2026/07/11/cve-2026-26247-gitea-1255/

Full discourse2 posts

ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker91d
General
【緊急】CVE-2026-26247 Gitea 1.25.5以前に深刻な脆弱性｜即時対応が必要 https://www.cybernote.click/2026/07/11/cve-2026-26247-gitea-1255/ #IT #Security #cybersecurity
Post summary
The post is a brief emergency notice calling for immediate action on CVE-2026-26247 for Gitea, but it provides no technical or exploit details, patches, or evidence of active exploitation.
0000043
207 followersView on X
ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker92d
General
【緊急】CVE-2026-26247 Gitea 1.25.5以前に深刻な脆弱性｜即時対応が必要 https://www.cybernote.click/2026/07/11/cve-2026-26247-gitea-1255/ #IT #Security #cybersecurity
Post summary
The post warns of a critical vulnerability in Gitea before version 1.25.5 but provides no technical details, PoC, exploit code, or patch information.
0000047
207 followersView on X

Explore more

Back to dashboard