Search: CVE-2026-27761

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.5%	CVE-2026-27761Gitea Open Source Git Server · Incorrect Authorization Medium4.3EPSS 0.5%2026-07-03CVE Database V5CVE-2026-27761 Gitea versions up to and including 1.26.2 have a vulnerability where repository RSS and Atom feed endpoints bypass API access token scope checks. This allows tokens without the required repository scope to access private repository commit data via these feeds. The issue is classified as CWE-863 (Incorrect Authorization). EPSS 0.5%Vulnerability CWE-863	CVE Database V5	2026-07-03

Page 1 of 1