CVE-2026-27783— Gitea issue-template APIs bypass repository unit authorization
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Gitea | Gitea Open Source Git Server | ≤ 1.26.1 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-27783
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Gitea issue-template APIs bypass repository unit authorization
Source: CVE Program / CVE List V5
Vulnerability Description
Gitea versions up to and including 1.26.1 do not enforce repository-unit authorization on issue-template API endpoints.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制缺失
Source: CVE Program / CVE List V5
Vulnerability Title
Gitea 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Gitea是Gitea组织开源的一个基于Go开发的轻量型git服务。 Gitea 1.26.1及之前版本存在授权问题漏洞，该漏洞源于在issue-template API端点上未强制执行仓库单元授权，可能导致授权问题。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Gitea | Gitea Open Source Git Server | 0 ~ 1.26.1 | - |
II. Public POCs for CVE-2026-27783
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-27783
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-27783 (2)
Vendor Advisories for CVE-2026-27783 (1)
Security Blog Posts for CVE-2026-27783 (1)
Vendor Pages for CVE-2026-27783 (1)
Same Patch Batch · Gitea · 2026-07-03 · 40 CVEs total
| CVE-2026-20896 | 9.8 CRITICAL | Gitea Docker image trusts spoofable reverse-proxy headers by default |
| CVE-2026-58426 | 9.6 CRITICAL | Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read |
| CVE-2026-22874 | 9.6 CRITICAL | Gitea webhook and migration allow-list filtering permits SSRF |
| CVE-2026-58424 | 8.9 HIGH | Permanent Fork PR Workflow Approval Gate Bypass |
| CVE-2026-28737 | 8.7 HIGH | Gitea 3D file viewer allows stored XSS through glTF extensionsRequired |
| CVE-2026-26231 | 8.5 HIGH | Gitea maintainer-edit permissions allow unauthorized commits to readable repositories |
| CVE-2026-28699 | 8.1 HIGH | Gitea Basic Auth bypasses OAuth2 access token scopes |
| CVE-2026-28744 | 8.1 HIGH | Gitea Git smart HTTP bypasses repository token scopes for bearer tokens |
| CVE-2026-22555 | 8.1 HIGH | Gitea organization forks can expose organization secrets without create permission |
| CVE-2026-58423 | 7.7 HIGH | LFS authentication bypass via malformed SSH sub-verb allows unauthorized read access to pr |
| CVE-2026-20779 | 7.1 HIGH | Gitea TOTP single-use enforcement defect allows OTP replay |
| CVE-2026-28740 | 7.1 HIGH | Gitea LFS object reuse bypasses Code-unit authorization |
| CVE-2026-58418 | 6.5 MEDIUM | SSRF via HTTP Redirect in Repository Migration |
| CVE-2026-25714 | 4.3 MEDIUM | Gitea user organization API bypasses public-only token filtering |
| CVE-2026-27761 | 4.3 MEDIUM | Gitea repository feeds bypass API token scope enforcement |
| CVE-2026-20909 | Gitea tracked-time list endpoint has insufficient permission checks | |
| CVE-2026-20706 | Gitea repository archive downloads bypass token scope checks | |
| CVE-2026-58421 | Unauthenticated ReDoS via CODEOWNERS pattern matching allows denial of service | |
| CVE-2026-58419 | Notification API leaks private issue metadata after access revocation | |
| CVE-2026-58422 | Improper authorization on OAuth sign-in callback silently re-enables administrator-disable |
Showing top 20 of 40 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Gitea Open Source Git Server
- CVE-2026-24059
Gitea runner registration-token GET endpoint performs a writ - CVE-2026-24791
Public-only tokens bypass private-resource restrictions on ` - CVE-2026-59765
SSRF via Migration Asset Downloads Bypasses hostmatcher — Re - CVE-2026-59763
Unbounded Arch package file metadata can cause resource ampl - CVE-2026-58511
Webhook Authorization Header Returned in Plaintext via API
Same vendor: Gitea
- CVE-2026-24059
Gitea runner registration-token GET endpoint performs a writ - CVE-2026-24791
Public-only tokens bypass private-resource restrictions on ` - CVE-2026-59765
SSRF via Migration Asset Downloads Bypasses hostmatcher — Re - CVE-2026-59763
Unbounded Arch package file metadata can cause resource ampl - CVE-2026-58511
Webhook Authorization Header Returned in Plaintext via API
Same weakness: CWE-862
- CVE-2026-67262
CVE-2026-67262 - CVE-2026-55106
authentik: Unauthenticated LDAP directory data disclosure - CVE-2026-45124
MyBB: Mod CP report resolution missing authorization - CVE-2026-74006
WordPress WP Table Builder plugin <= 2.2.0 - Broken Access C - CVE-2026-74003
WordPress RomethemeForm For Elementor plugin <= 1.2.6 - Brok
V. Comments for CVE-2026-27783
No comments yet