8.2 HighCWE-862
CVE-2026-27771
Gitea Open Source Git Server vulnerability
GiteaGitea Open Source Git Server
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 23 Oct
1.4%probability of exploitation in the next 30 days
Higher than 72% of scored CVEs
SeverityCVSS
8.2High
Description NVD
Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information.
Coverage 1 article · 1 outlet
- Unauthenticated Gitea flaw leaks private images (CVE-2026-27771)SecurityWeek · first in our coverage