NCSC-2026-0219

csafNLncsc_nl

NLShown in its original language — a full translation is planned for a future version.

Kwetsbaarheden verholpen in GitHub Enterprise Server

view advisory published 2026-07-03

GitHub heeft meerdere kwetsbaarheden verholpen in GitHub Enterprise Server, specifiek in versies vóór 3.21 en 3.22.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2026-10585USmedium5.4—
A stored cross-site scripting vulnerability was identified in GitHub Enterprise Server that allowed an authenticated attacker to execute arbitrary JavaScript in another user's brow…
CVE-2026-9132USmedium6.5OT elevated—
A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user to read source code from private repositories they did not have…
CVE-2026-9106USmedium5.5—
A UI misrepresentation vulnerability was identified in GitHub Enterprise Server that allowed an OAuth application to gain unintended access to an organization's runner management.…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan