CVE-2026-58424 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	8.9 HIGH	NETWORK	LOW	LOW	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: Unknown

Common Weakness Enumeration

CWE-285 - Improper Authorization
The software does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

References

https://blog.gitea.com/release-of-1.26.3-and-1.26.4/

https://github.com/go-gitea/gitea/pull/38010

https://github.com/go-gitea/gitea/releases/tag/v1.26.4

https://github.com/go-gitea/gitea/security/advisories/GHSA-777r-4v59-6486