Articles Writeups CVE Programs

Sign in Start free

BUGFLARE

Threat intelligence and bug bounty research platform. Live vulnerability data, in-app writeup reading, and program tracking — aggregated from trusted public sources.

Explore

Articles Writeups CVE Programs Create account

Legal

© 2026 Bugflare. Publishers retain authorship; always verify on the source.

bugflare.site

CVE-2026-58428 · Info · Bugflare

CVE-2026-58428

Info

CVE: CVE-2026-58428 - Release attachment extension allowlist bypass via web release edit form (variant of CVE-2025-68939)Sign in to save

Sign in to like · 0

CVSS

N/A

CVSS

EPSS

N/A

Exploit Prediction Score

Published

August 13, 2026

Exploitability

No EPSS data available

Description

Release attachment extension allowlist bypass via web release edit form (variant of CVE-2025-68939)

Weaknesses

CWE-424CWE-434

Affected Packages

No package data available.

Aliases

Related references

Publisher and database URLs for this record (shown for attribution; reading stays in Bugflare).

https://blog.gitea.com/gitea-1.27.0-is-released/
https://github.com/go-gitea/gitea/releases/tag/v1.27.0
https://github.com/go-gitea/gitea/security/advisories/GHSA-25gq-j9jx-43pg

Source

Originally published by NVD (nvd.nist.gov).

CVE metadata is aggregated from public vulnerability databases. Scores and descriptions remain attributed to their origin feeds.

Open original on nvd.nist.gov →https://nvd.nist.gov/vuln/detail/CVE-2026-58428