{"id":"EUVD-2026-41639","enisaUuid":"74b9aeb1-cf01-318a-9b16-34f12ee5be7d","description":"Gitea versions up to and including 1.26.1 do not enforce repository-unit authorization on issue-template API endpoints.","datePublished":"Jul 3, 2026, 8:19:38 PM","dateUpdated":"Jul 6, 2026, 3:19:12 PM","baseScore":4.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","references":"https://github.com/go-gitea/gitea/security/advisories/GHSA-3fwp-p5rj-2pxf\nhttps://github.com/go-gitea/gitea/pull/37769\nhttps://github.com/go-gitea/gitea/pull/37781\nhttps://github.com/go-gitea/gitea/releases/tag/v1.26.2\nhttps://blog.gitea.com/release-of-1.26.2/\n","aliases":"CVE-2026-27783\nGHSA-3fwp-p5rj-2pxf\n","assigner":"Gitea","epss":0.35,"enisaIdProduct":[{"id":"d81e5227-10e7-3af2-a11c-514cc0df8e15","product":{"name":"Gitea Open Source Git Server","vendor":{"name":"Gitea"}},"product_version":"0 ≤1.26.1"}],"enisaIdVendor":[{"id":"a8d24af0-06b4-30c5-9cb8-430cc7d46ce1","vendor":{"name":"Gitea"}}],"enisaIdVulnerability":[{"id":"dbbed15c-6b8e-30fd-be65-3ce4ed225568","vulnerability":{"id":"CVE-2026-27783","description":"Gitea versions up to and including 1.26.1 do not enforce repository-unit authorization on issue-template API endpoints.","datePublished":"Jul 3, 2026, 8:19:38 PM","dateUpdated":"Jul 6, 2026, 3:19:12 PM","status":"PUBLISHED","baseScore":4.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","references":"https://github.com/go-gitea/gitea/security/advisories/GHSA-3fwp-p5rj-2pxf\nhttps://github.com/go-gitea/gitea/pull/37769\nhttps://github.com/go-gitea/gitea/pull/37781\nhttps://github.com/go-gitea/gitea/releases/tag/v1.26.2\nhttps://blog.gitea.com/release-of-1.26.2/\n","enisa_id":"EUVD-2026-41639\n","assigner":"Gitea","epss":0.35,"dataProcessed":"Nov 3, 2026, 7:17:20 AM","vulnerabilityProduct":[{"id":"a7e5bef0-3e1f-3b73-9516-9fdb1cb92bdb","product":{"name":"Gitea Open Source Git Server","vendor":{"name":"Gitea"}},"product_version":"0 ≤1.26.1"}],"vulnerabilityVendor":[{"id":"1ba6eaf6-bfa4-304d-9800-f81eb1578105","vendor":{"name":"Gitea"}}]}},{"id":"fb66337a-59fe-3618-818f-7b8c0d46c8af","vulnerability":{"id":"GHSA-3fwp-p5rj-2pxf","description":"Gitea: Missing repository-unit authorization on issue-template API endpoints","datePublished":"Jun 16, 2026, 11:41:42 PM","dateUpdated":"Jun 16, 2026, 11:41:42 PM","baseScore":0.0,"references":"https://github.com/go-gitea/gitea/security/advisories/GHSA-3fwp-p5rj-2pxf\nhttps://github.com/go-gitea/gitea\n","enisa_id":"EUVD-2026-41639\n","aliases":"GHSA-3fwp-p5rj-2pxf\nCVE-2026-27783\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:01:46 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}