Skip to content
EXPLOIT
.CC
CVEs
Search
About
synced 12 MIN AGO
T-12M
01
Record
STATE: —
02
Description
SRC: CNA
03
Metadata
SCHEMA: CVE JSON 5
04
Affected products
PAIRS: —
05
References
REFS: —
01
Record
STATE: PUBLISHED
CVE-2026-56654
Privilege Escalation via Access Token Scope Escalation in API
Unrated
PUBLISHED
CNA: Gitea
Base score
Unrated
No CVSS vector published
View raw JSON
CVE Program record
02
Description
CNA: Gitea
Privilege Escalation via Access Token Scope Escalation in API
03
Metadata
SCHEMA: 5.2
Published
2026-08-13 16:44Z
1 DAY AGO
Last updated
2026-08-13 16:44Z
1 DAY AGO
Reserved
2026-07-08
Assigning CNA
Gitea
Record state
PUBLISHED
Severity
Unrated — no CVSS score published
CVSS vector
Not published
Weaknesses
CWE-284
SSVC decision
No CISA-ADP assessment
Data version
5.2
Document digest
b189421ec9e07aaacfef5f539217cb2d11e20665b6a86abe8c4f2498c3d03d6c
04
Affected products
PAIRS: 1
Vendor
Product
Versions
Platforms
Gitea
Gitea Open Source Git Server
0 to 1.26.4
—
05
References
REFS: 3
github.com
GitHub Security Advisory
https://github.com/go-gitea/gitea/security/advisories/GHSA-683j-3ff6-hh2x
vendor-advisory
github.com
Gitea v1.27.0 Release
https://github.com/go-gitea/gitea/releases/tag/v1.27.0
release-notes
blog.gitea.com
Gitea v1.27.0 Release Blog Post
https://blog.gitea.com/gitea-1.27.0-is-released/
release-notes