CVE Tools
Track your stack

Critical Gitea Security Flaws Expose Servers to Takeover

Daily CyberSecurity (securityonline.info)

PoC publicGitea

Our summary

A pair of critical security issues in Gitea could allow remote attackers to bypass authentication and perform Server-Side Request Forgery (SSRF) attacks, potentially leading to full takeover of administrative accounts. The affected vulnerabilities are tracked as CVE-2026-20896 (critical, impacts Gitea Docker deployments using reverse proxy authentication due to overly trusting proxy headers) and CVE-2026-22874 (high, allows incomplete SSRF filtering in webhook and repository migration paths). Both issues affect Gitea versions 1.26.2 and earlier, so administrators should upgrade to Gitea version 1.26.3 immediately.

Read at Daily CyberSecurity (securityonline.info)

Daily CyberSecurity (securityonline.info) publishes this story on its own site; we link to it rather than reprint it.

  1. BleepingComputerOver 8,300 Gitea servers vulnerable to code execution attacksCVE-2026-20896
  2. BleepingComputerHackers now exploit critical Gitea flaw in code injection attacksCVE-2026-20896
  3. SecurityWeekCISA Warns of Exploited Gitea VulnerabilityCVE-2026-20896
  4. The Hacker NewsCritical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode MarkupCVE-2026-20896
  5. BleepingComputerHackers exploit critical auth bypass in Gitea Docker imageCVE-2026-20896
  6. SecurityWeekCritical Gitea Flaw Under Active Exploitation, Researchers WarnCVE-2026-20896
  7. The Hacker NewsThreat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After DisclosureCVE-2026-20896
  8. The Hacker News⚡ Weekly Recap: Proxy Botnets, Browser Ransomware, AI Agent Tricks, Fake PoC Malware and MoreCVE-2026-20896

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store