CVE-2026-58442

MediumCVSS 6.5

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

16th percentile - higher than 16% of all known CVEs

Repository migration SSRF via multi-answer DNS allow-list bypass.

An attacker can exploit this vulnerability to access internal network resources, potentially leading to data leakage or further attacks.

Update Gitea to a patched version and implement proper DNS response validation and network restrictions.

Original NVD description (English source)

Repository migration SSRF via multi-answer DNS allow-list bypass