Authentication

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. An authentication bypass vulnerability was present in the GitHub Enterprise Server (GHES) when utilizing SAML single sign-on authentication with the optional encrypted assertions…CVE-2024-4985GitHub · CVSS 10 · 2.6% likely

   CWE-303

2. Improper Authentication in GitHub Enterprise Server leading to Authentication Bypass for Public Repository DataCVE-2023-6847GitHub · CVSS 7.5 · 0.8% likely

   CWE-287

3. Improper authentication vulnerability in GitHub Enterprise Server leading to modification of secret gistsCVE-2023-23761GitHub · CVSS 7.7 · 0.5% likely

   CWE-2871 bounty report

4. Authentication bypass vulnerability in GitHub Enterprise Server allowed creation of local user accounts bypassing the configured external identity providerCVE-2026-6736GitHub · CVSS 6.3 · 0.3% likely

   CWE-306

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.