CVE-2026-25038 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	UNKNOWN				---

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: Unknown

Common Weakness Enumeration

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References

https://blog.gitea.com/release-of-1.26.3-and-1.26.4/

https://github.com/go-gitea/gitea/pull/38151

https://github.com/go-gitea/gitea/releases/tag/v1.26.3

https://github.com/go-gitea/gitea/security/advisories/GHSA-v73x-hx65-6pf4