Raincombat/CVE-2026-20896-Gitea-CTF

PoC

CVE-2026-20896 Gitea Docker CTF Challenge

view exploit source poc_in_githubauthor Raincombatpublished 2026-10-15catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-20896US	—	2.76% (86th)	Exploit	2026-07-03
Gitea Docker image versions up to and including 1.26.2 use REVERSE_PROXY_TRUSTED_PROXIES=* by default, allowing any source IP to impersonate a user when reverse-proxy authenticatio…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.