DeutschShown in its original language — a full translation is planned for a future version.
Microsoft GitHub Enterprise: Mehrere Schwachstellen
view advisory published 2026-05-07
Ein Angreifer kann mehrere Schwachstellen in Microsoft GitHub Enterprise ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, und um Informationen offenzulegen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-8106US | medium6.1 | — | ||
A reflected HTML injection vulnerability was identified in the GitHub Enterprise Server Management Console login page that could allow credential theft. The redirect_to query param… | ||||
| CVE-2026-8034US | critical9.8 | — | ||
A server-side request forgery (SSRF) vulnerability was identified in the GitHub Enterprise Server notebook viewer that allowed an attacker to access internal services by exploiting… | ||||
| CVE-2026-7541US | high7.5 | — | ||
A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause service disruption by sending crafted requests with d… | ||||
| CVE-2026-6736US | medium6.5OT elevated | — | ||
An authentication bypass vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to create a local user account, bypassing the configured… | ||||
02
references
External citations — patches, advisories, analysis.
- Enterprise Server 3.16 release notes vom 2026-05-07external
- Enterprise Server 3.17 release notes vom 2026-05-07external
- Enterprise Server 3.18 release notes vom 2026-05-07external
- Enterprise Server 3.19 release notes vom 2026-05-07external
- Enterprise Server 3.20 release notes vom 2026-05-07external
- GitHub Advisory Database vom 2026-05-07external
- GitHub Advisory Database vom 2026-05-07external
- GitHub Advisory Database vom 2026-05-07external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan