CVE Catalog
CVE-2026-58314
HighCVSS 7.7Exploitation Probability (EPSS)
Low risk0.30%
22th percentile - higher than 22% of all known CVEs
Summary
Two Server-Side Request Forgery (SSRF) findings in Gitea 1.26.2. They allow an attacker to make requests from the server to internal resources.
Risk Assessment
Risk of accessing internal systems and services, which could be used for further attacks or data theft.
Recommendation
Update Gitea to a version newer than 1.26.2 and configure network firewalls to restrict outbound requests from the server.
Original NVD description (English source)
Two SSRF findings in Gitea 1.26.2