VulnSocial

CVE-2026-58443PoC

LOW

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

Back to dashboard
2.0/ 10 priority

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 7 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 3 signals
  • Patch or workaround mentioned in 3 signals
  • Technical details provided in 6 signals
  • Disclosure: 1 classified signal
  • Peaked 2d ago at 3 mentions (2026-07-21); latest day: 1
  • 7 total mentions across 4 days

Deep dive

Activity timeline7 mentions / 4d
01223Mentions · 2026-07-20: 2Mentions · 2026-07-21: 3Mentions · 2026-07-28: 1Mentions · 2026-08-17: 1PoC Mentioned / Linked · 2026-07-20: 2PoC Mentioned / Linked · 2026-07-28: 1Patch / Workaround · 2026-07-20: 1Patch / Workaround · 2026-07-21: 2Technical Details · 2026-07-20: 2Technical Details · 2026-07-21: 2Technical Details · 2026-07-28: 1Technical Details · 2026-08-17: 107-2007-2107-2808-17
Signal classification4 categories
PoC
342.9%
Patch
228.6%
Disclosure
114.3%
General
114.3%
Referenced assets7 URLs
Classification over time
DateTotalLabels
2026-07-202
PoC2
2026-07-213
Disclosure1Patch2
2026-07-281
PoC1
2026-08-171
General1
Full discourse7 posts
  • elhacker.NET@elhackernet
    Patch

    Grave vulnerabilidad en Gitea permite escribir en repositorios privados y activar flujos de trabajo Se urge a los usuarios de Gitea a actualizar su software inmediatamente debido a una vulnerabilidad crítica (CVE-2026-58443) https://blog.elhacker.net/2026/07/grave-vulnerabilidad-en-gitea-permite.html

    Post summary

    An announcement highlights a critical flaw in Gitea that lets attackers write to private repositories and trigger workflows, urging an immediate software update.

    11214965.7K
    141.8K followersView on X
  • Daily CyberSecurity@Daily_CyberSec
    PoC

    Gitea vulnerability CVE-2026-58443 (CVSS 9.6) lets public-only tokens write to private repos. Details and PoC code are public. Update to v1.27.0. #Gitea #CVE202658443 #DevSecOps #PoC #InfoSec http://securityonline.info/gitea-vulnerability/

    Post summary

    The text announces CVE-2026-58443, provides that the PoC code is publicly available, details the vulnerability, and advises updating to v1.27.0.

    0701711.1K
    12.9K followersView on X
  • iototsecnews@iototsecnews
    PoC

    Gitea の脆弱性 CVE-2026-58443 が FIX：プライベート・ブランチの変更を実証する PoC https://iototsecnews.jp/2026/07/21/critical-gitea-vulnerability-enables-private-repository-writes-and-actions-workflow-triggers/ 今回の CVE-2026-58443 は、Gitea の API エンドポイントにおける認可の検証不備が原因で発生しています。公開リポジトリ専用のトークンを使用した際、最初の処理では公開リポジトリに対するアクセス制限を正しくチェックします。しかし、その後の非公開ブランチへアクセスする際に、ユーザーのアカウント権限のみを確認し、トークン自体の公開専用という制限を再適用しません。この検証の抜け漏れにより、制限されたトークンであっても pull request の更新機能を経由することで、本来は変更できないはずの非公開ブランチへの書き込みが許可されてしまいます。ご利用のチームは、ご注意ください。 #CVE202658443 #Gitea #PoC #Vulnerability

    Post summary

    The article reveals that Gitea’s CVE-2026-58443 allows writes to private branches using a public repository token and shares a PoC to demonstrate the flaw.

    01010147
    503 followersView on X
  • IntegSec@integ_sec
    General

    CVE-2026-58443: Gitea Public-Only Token Authorization Flaw - What It Means for Your Business and How to Respond https://hubs.li/Q04thsHw0

    Post summary

    The article announces a Gitea authentication flaw, providing a high-level vulnerability description but no details on PoC, exploitation, or mitigation.

    0000023
    32 followersView on X
  • ThreadLinqs@threadlinqs
    Disclosure

    A public-only Gitea token can quietly write into private repos and fire their CI runners. CVE-2026-58443. https://intel.threadlinqs.com/threat/TL-2026-1587 #ThreatIntel #CVE_2026_58443 #GHSAxxjv752h3vp2 #Gitea https://t.co/m343Na45MC

    Post summary

    The tweet announces the Gitea CVE‑2026‑58443 vulnerability, detailing how a public‑only token can modify private repos and launch CI runners, and points to a threat‑intel report.

    0000071
    109 followersView on X
  • The Daily Tech Feed@dailytechonx
    Patch

    A critical vulnerability in Gitea (CVE-2026-58443) allows unauthorized modifications to private repositories and triggers private Actions workflows. This flaw affects versions up to 1.26.4 and has been patched in v1.27.0. Administrators should update immediately to secure their instances and review access controls to prevent exploitation. #Gitea #CVE202658443 #CyberSecurity #DevOps #Git #OpenSource #SecurityUpdate https://thedailytechfeed.com/critical-gitea-flaw-allows-unauthorized-private-repo-access/

    Post summary

    The post informs users of Gitea CVE-2026-58443, detailing its impact on private repositories, noting the patch in v1.27.0, and urging administrators to apply the update immediately.

    0000073
    547 followersView on X
  • moton@moton
    PoC

    Gitea CVE-2026-58443 (CVSS 9.6): PoC Exploit Published - https://securityonline.info/gitea-vulnerability/

    Post summary

    A PoC exploit for Gitea CVE-2026-58443, rated CVSS 9.6, has been published and linked.

    00000117
    670 followersView on X

Explore more

Back to dashboard