Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Gogs is an open source self-hosted Git service. Prior to 0.14.3, organization team member management can be performed via GET requests without CSRF protection. If a victim who is an organization owner is logged in and is tricked into visiting a crafted link, an attacker-controlled user can be added to the Owners team. As a result, the attacker gains organization owner–equivalent privileges. This vulnerability is fixed in 0.14.3.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-06-23 | 1 | Disclosure1 |
| 2026-06-24 | 2 | Disclosure2 |
CVE-2026-52800 Gogs is an open source self-hosted Git service. Prior to 0.14.3, organization team member management can be performed via GET requests without CSRF protection. If a v… https://www.cve.org/CVERecord?id=CVE-2026-52800
Post summary
The tweet announces CVE‑2026‑52800, noting a CSRF‑related vulnerability in Gogs prior to version 0.14.3.
🚨*CVE* CVE-2026-52800 Gogs is an open source self-hosted Git service. Prior to 0.14.3, organization team member management can be performed via GET requests without CSRF protection. If a v… https://www.cve.org/CVERecord?id=CVE-2026-52800 ----- Traducción: CVE-2026-52800 Gog… http://infoflow.cloud`
Post summary
The post cites CVE-2026-52800, describing a CSRF‑omission in Gogs’ organization team member management via GET requests in pre‑0.14.3 releases, but provides no PoC, exploit, or mitigation details.
🟠 Gogs, Cross-Site Request Forgery (CSRF), #CVE-2026-52800 (Medium) -DC-Jun2026-574 https://dailycve.com/gogs-cross-site-request-forgery-csrf-cve-2026-52800-medium-dc-jun2026-574/
Post summary
The post presents a basic CVE disclosure for a medium‑severity CSRF vulnerability in Gogs, with no evidence of exploitation, PoC, or remediation details.