Articles Writeups CVE Programs

Sign in Start free

BUGFLARE

Threat intelligence and bug bounty research platform. Live vulnerability data, in-app writeup reading, and program tracking — aggregated from trusted public sources.

Explore

Articles Writeups CVE Programs Create account

Legal

© 2026 Bugflare. Publishers retain authorship; always verify on the source.

bugflare.site

CVE-2026-58431 · Info · Bugflare

CVE-2026-58431

Info

CVE: CVE-2026-58431 - Public-only API token restriction is not enforced on team API routesSign in to save

Sign in to like · 0

CVSS

N/A

CVSS

EPSS

N/A

Exploit Prediction Score

Published

August 13, 2026

Exploitability

No EPSS data available

Description

Public-only API token restriction is not enforced on team API routes

Weaknesses

CWE-863

Affected Packages

No package data available.

Aliases

Related references

Publisher and database URLs for this record (shown for attribution; reading stays in Bugflare).

https://blog.gitea.com/gitea-1.27.0-is-released/
https://github.com/go-gitea/gitea/releases/tag/v1.27.0
https://github.com/go-gitea/gitea/security/advisories/GHSA-h56g-4qw7-2mxg

Source

Originally published by NVD (nvd.nist.gov).

CVE metadata is aggregated from public vulnerability databases. Scores and descriptions remain attributed to their origin feeds.

Open original on nvd.nist.gov →https://nvd.nist.gov/vuln/detail/CVE-2026-58431