Open Source Open Source Gitea <1.27.3

Name: Open Source Open Source Gitea <1.27.3
Brand: Open Source

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

critical

by severity

0critical0high0medium0low

updated 2026-10-28

vulnerabilities (26)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-63021US	—	0.55% (46th)	—	1.27.3	2026-10-14	< 1.27.3
CVE-2026-62925US	—	0.55% (46th)	—	1.27.3	2026-10-14	< 1.27.3
CVE-2026-60021US	—	0.55% (46th)	—	1.27.3	2026-10-14	< 1.27.3
CVE-2026-60018US	—	0.55% (46th)	—	1.27.3	2026-10-14	< 1.27.3
CVE-2026-71184US	—OT elevated	0.49% (42nd)	—	1.27.3	2026-10-14	< 1.27.3
CVE-2026-60010US	—OT elevated	0.47% (41st)	—	1.27.3	2026-10-14	< 1.27.3
CVE-2026-63792US	—	0.43% (38th)	—	1.27.3	2026-10-14	< 1.27.3
CVE-2026-66877US	—	0.43% (37th)	—	1.27.3	2026-10-14	< 1.27.3
CVE-2026-70396US	—OT elevated	0.40% (34th)	—	1.27.3	2026-10-14	< 1.27.3
CVE-2026-68964US	—	0.40% (34th)	—	1.27.3	2026-10-14	< 1.27.3
CVE-2026-68957US	—	0.40% (34th)	—	1.27.3	2026-10-14	< 1.27.3
CVE-2026-73273US	—	0.39% (33rd)	—	1.27.3	2026-10-14	< 1.27.3
CVE-2026-70400US	—OT elevated	0.38% (32nd)	—	1.27.3	2026-10-14	< 1.27.3
CVE-2026-67577US	—	0.37% (31st)	—	1.27.3	2026-10-14	< 1.27.3
CVE-2026-66853US	—OT elevated	0.37% (31st)	—	1.27.3	2026-10-14	< 1.27.3
CVE-2026-66849US	—	0.37% (31st)	—	1.27.3	2026-10-14	< 1.27.3
CVE-2026-78433US	—OT elevated	0.37% (31st)	—	1.27.3	2026-10-14	< 1.27.3
CVE-2026-73130US	—	0.37% (30th)	—	1.27.3	2026-10-14	< 1.27.3
CVE-2026-73135US	—	0.36% (30th)	—	1.27.3	2026-10-14	< 1.27.3
CVE-2026-70406US	—OT elevated	0.34% (27th)	—	1.27.3	2026-10-14	< 1.27.3
CVE-2026-70407US	—	0.32% (24th)	—	1.27.3	2026-10-14	< 1.27.3
CVE-2026-73126US	—OT elevated	0.29% (22nd)	—	1.27.3	2026-10-14	< 1.27.3
CVE-2026-71301US	—	0.29% (22nd)	—	1.27.3	2026-10-14	< 1.27.3
CVE-2026-66874US	—OT elevated	0.26% (18th)	—	1.27.3	2026-10-14	< 1.27.3
CVE-2026-70402US	—	0.19% (9th)	—	1.27.3	2026-10-14	< 1.27.3
CVE-2026-73504US	—	—	—	1.27.3	—	< 1.27.3

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control8 CVEs
CWE-863Incorrect Authorization8 CVEs
CWE-400Uncontrolled Resource Consumption5 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-1220Insufficient Granularity of Access Control1 CVEs
CWE-266Incorrect Privilege Assignment1 CVEs
CWE-280Improper Handling of Insufficient Permissions or Privileges1 CVEs
CWE-285Improper Authorization1 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)26 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan