CVE Catalog
CVE-2026-58508
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk0.15%
4th percentile - higher than 4% of all known CVEs
Summary
Two SSRF vulnerabilities in Gitea migration/mirror (DNS rebinding + missing re-validation).
Risk Assessment
An attacker can exploit SSRF to access internal network resources, potentially leading to data leakage or further attacks.
Recommendation
Update Gitea to a patched version and implement proper URL validation and DNS rebinding protection.
Original NVD description (English source)
Two SSRF vulnerabilities in Gitea migration/mirror (DNS rebinding + missing re-validation)