{"id":"EUVD-2026-41621","enisaUuid":"68217b20-bc9f-3359-9a2b-3daaf1ebfe70","description":"Gitea 1.26.2 allows unauthorized users to access labels of private organizations.","datePublished":"Jul 3, 2026, 8:19:32 PM","dateUpdated":"Jul 7, 2026, 5:00:09 PM","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","references":"https://github.com/go-gitea/gitea/security/advisories/GHSA-v73x-hx65-6pf4\nhttps://github.com/go-gitea/gitea/pull/38151\nhttps://github.com/go-gitea/gitea/releases/tag/v1.26.3\nhttps://blog.gitea.com/release-of-1.26.3-and-1.26.4/\n","aliases":"CVE-2026-25038\nGHSA-v73x-hx65-6pf4\n","assigner":"Gitea","epss":0.62,"enisaIdProduct":[{"id":"23c10fde-cb8d-3e9e-9858-c86f60a3cd8b","product":{"name":"Gitea Open Source Git Server","vendor":{"name":"Gitea"}},"product_version":"1.26.2"}],"enisaIdVendor":[{"id":"5a758f1c-9d00-3526-8d9b-27add7ef488f","vendor":{"name":"Gitea"}}],"enisaIdVulnerability":[{"id":"39cb41e4-3e6c-38ce-8e50-1ca3d9aad756","vulnerability":{"id":"GHSA-v73x-hx65-6pf4","description":"Gitea: Unauthorized Access to Labels of Private Organizations","datePublished":"Jul 21, 2026, 9:46:39 PM","dateUpdated":"Jul 21, 2026, 9:46:40 PM","baseScore":0.0,"references":"https://github.com/go-gitea/gitea/security/advisories/GHSA-v73x-hx65-6pf4\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-25038\nhttps://github.com/go-gitea/gitea/pull/38151\nhttps://github.com/go-gitea/gitea/commit/99f8b3d9a1d32f4c39828e07971455a18191e0b9\nhttps://blog.gitea.com/release-of-1.26.3-and-1.26.4\nhttps://github.com/go-gitea/gitea\nhttps://github.com/go-gitea/gitea/releases/tag/v1.26.3\n","enisa_id":"EUVD-2026-41621\n","aliases":"CVE-2026-25038\nGHSA-v73x-hx65-6pf4\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:03:08 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"443050ea-36bc-3d3b-b7da-eb039d4e856b","vulnerability":{"id":"CVE-2026-25038","description":"Gitea 1.26.2 allows unauthorized users to access labels of private organizations.","datePublished":"Jul 3, 2026, 8:19:32 PM","dateUpdated":"Jul 7, 2026, 5:00:09 PM","status":"PUBLISHED","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","references":"https://github.com/go-gitea/gitea/security/advisories/GHSA-v73x-hx65-6pf4\nhttps://github.com/go-gitea/gitea/pull/38151\nhttps://github.com/go-gitea/gitea/releases/tag/v1.26.3\nhttps://blog.gitea.com/release-of-1.26.3-and-1.26.4/\n","enisa_id":"EUVD-2026-41621\n","assigner":"Gitea","epss":0.62,"dataProcessed":"Nov 7, 2026, 7:16:38 AM","vulnerabilityProduct":[{"id":"e24fc9f9-7c87-3ed1-8b40-cc105d8199d7","product":{"name":"Gitea Open Source Git Server","vendor":{"name":"Gitea"}},"product_version":"1.26.2"}],"vulnerabilityVendor":[{"id":"3f490841-d629-321e-a586-5b72eb92cde4","vendor":{"name":"Gitea"}}]}}],"enisaIdAdvisory":[]}