VulnSocial

CVE-2026-58433

LOWCVSS 9.1 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Team-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization setting

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-862

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-10-25: 210-25
Referenced assets1 URL
By indicator
Full discourse2 posts
  • Stingrai.io@Stingrai_HQ

    Snipe, our autonomous AI agent, found a CVE in Gitea. CVE-2026-58433: high-severity authorization bypass in Gitea 1.26.4 and earlier. Fixed in 1.27.0. Here is why no scanner would have caught it. https://t.co/lqRgEwQyuj

    1000047
    21 followersView on X
  • Stingrai.io@Stingrai_HQ

    Full defender briefing, no exploit steps: https://www.stingrai.io/blog/cve-2026-58433-gitea-team-api-authorization-bypass Found by Snipe. Validated and reported by our team. Fixed by Gitea in 1.27.0.

    0000027
    21 followersView on X

Explore more

Back to dashboard