Threats Tagged 'cve-2026-6736'
View all threats tagged with 'cve-2026-6736'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-6736'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-6736 is an authentication bypass vulnerability in GitHub Enterprise Server versions prior to 3.21. It allows an unauthenticated attacker to create a local user account despite external identity provider enforcement. The vulnerability occurs because the signup endpoint does not properly enforce authentication restrictions when external authentication is enabled. The attacker can establish a session with default base permissions on the instance. Exploitation requires network access to a vulnerable GitHub Enterprise Server instance configured with an external authentication provider. The issue was fixed in versions 3.20.2, 3.19. Join the discussion | CVE Database V5 | 05/07/2026, 21:14:33 UTC Added: 05/07/2026, 21:22:38 UTC |
Showing 1 to 1 of 1 result