Open Source Open Source Gitea <1.27.0

Name: Open Source Open Source Gitea <1.27.0
Brand: Open Source

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

critical

by severity

0critical0high0medium0low

updated 2026-10-24

vulnerabilities (48)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-58436US	—	0.61% (49th)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-56654US	—	0.60% (48th)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-58443US	—OT elevated	0.58% (47th)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-42931US	—	0.53% (44th)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-58439US	—OT elevated	0.53% (44th)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-56443US	—OT elevated	0.53% (44th)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-58433US	—OT elevated	0.51% (43rd)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-55982US	—	0.51% (42nd)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-59765US	—	0.50% (42nd)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-58440US	—OT elevated	0.48% (41st)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-58508US	—	0.48% (40th)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-56750US	—	0.48% (40th)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-58429US	—	0.47% (40th)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-58420US	—	0.47% (40th)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-58438US	—OT elevated	0.47% (39th)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-58434US	—OT elevated	0.47% (39th)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-58427US	—OT elevated	0.47% (39th)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-58417US	—OT elevated	0.47% (39th)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-58428US	—	0.46% (39th)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-55984US	—	0.46% (39th)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-58432US	—OT elevated	0.43% (37th)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-58442US	—	0.43% (36th)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-59763US	—	0.41% (35th)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-55987US	—OT elevated	0.41% (34th)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-25946US	—	0.41% (34th)	—	1.27.0	2026-10-14	< 1.27.0
CVE-2026-57897US	—OT elevated	0.41% (34th)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-58314US	—	0.40% (33rd)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-58511US	—	0.39% (32nd)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-58507US	—	0.38% (31st)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-58445US	—	0.37% (29th)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-58444US	—OT elevated	0.36% (29th)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-50105US	—OT elevated	0.36% (29th)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-57894US	—	0.36% (28th)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-58437US	—	0.34% (26th)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-58510US	—	0.33% (25th)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-58431US	—OT elevated	0.33% (25th)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-58425US	—OT elevated	0.33% (25th)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-55986US	—	0.32% (24th)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-58416US	—OT elevated	0.31% (23rd)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-57886US	—OT elevated	0.31% (23rd)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-54481US	—	0.30% (22nd)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-58435US	—	0.29% (21st)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-23603US	—	0.29% (20th)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-59766US	—OT elevated	0.28% (20th)	—	1.27.0	2026-10-14	< 1.27.0
CVE-2026-78231US	—	0.26% (16th)	—	1.27.0	2026-10-14	< 1.27.0
CVE-2026-56755US	—	0.17% (7th)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-56657US	—	0.17% (7th)	—	1.27.0	2026-08-13	< 1.27.0
CVE-2026-58441US	—	0.17% (5th)	—	1.27.0	2026-08-13	< 1.27.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control30 CVEs
CWE-863Incorrect Authorization13 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor12 CVEs
CWE-706Use of Incorrectly-Resolved Name or Reference9 CVEs
CWE-918Server-Side Request Forgery (SSRF)8 CVEs
CWE-664Improper Control of a Resource Through its Lifetime7 CVEs
CWE-862Missing Authorization6 CVEs
CWE-639Authorization Bypass Through User-Controlled Key4 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)48 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan