Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An improper authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated attacker to determine the names of private repositories by their numeric ID. The mobile upload policy API endpoint did not perform an early authorization check, and validation error messages included the full repository name for repositories the caller did not have access to. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.21 and was fixed in versions 3.20.1, 3.19.5, 3.18.8, 3.17.14, 3.16.17, 3.15.21, and 3.14.26. This vulnerability was reported via the GitHub Bug Bounty program.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-04-22 | 1 | Disclosure1 |
| 2026-04-26 | 1 | General1 |
CVE-2026-5512 Improper Authorization in GitHub Enterprise Server Allows Private Repository Name Disclosure https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-5512
Post summary
The text is a concise disclosure of CVE‑2026‑5512, noting an improper authorization flaw in GitHub Enterprise Server that can leak private repository names, with no evidence of PoC, exploit code, patch, or active exploitation.
CVE-2026-5512 An improper authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated attacker to determine the names of private repositories… https://www.cve.org/CVERecord?id=CVE-2026-5512
Post summary
The post references CVE-2026-5512, describing an improper authorization flaw in GitHub Enterprise Server that lets authenticated users discover private repository names, but provides no PoC, exploit, or mitigation details.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | github | enterprise_server | - | - | - |
| App | github | enterprise_server | 3.20.0 | - | - |