CVE-2026-107618None▾ Sunlit`POST /{owner}/{repo}/topics` was registered without the sign-in middleware that provides the cross-origin protection, so a request issued by a third-party site was not rejected. A repository administrator who visited a malicious page co…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 20.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
POST /{owner}/{repo}/topics was registered without the sign-in middleware that provides the cross-origin protection, so a request issued by a third-party site was not rejected. A repository administrator who visited a malicious page could have the topics of their repository changed. No other repository settings were reachable through this route.
gitea.dev <= 28.1.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-109553High· 7.5Gitea SSH certificate principal impersonation of other users
CVE-2026-105661Medium· 5.3Gitea panic on the repositories route of individual users
CVE-2026-107686Medium· 4.3Gitea reactions accepted on locked issues and comments
CVE-2026-110494Medium· 6.3Gitea release attachment re-linking of issue attachments
CVE-2026-97204Low· 3.1Gitea label deletion across repository and organization IDs
CVE-2026-104627Medium· 5.4Gitea OpenID account linking without session binding