Skip to content
OpenAdvisories
High WID-SEC-2026-0460 2 CVEs

Microsoft GitHub Enterprise Server: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen

Published Feb 18, 2026 · Updated Feb 18, 2026 · de-DE

Vendor: Microsoft Product: GitHub Enterprise

Summary

Ein Angreifer kann mehrere Schwachstellen in Microsoft GitHub Enterprise Server ausnutzen, um Sicherheitsvorkehrungen zu umgehen.

Product

GitHub ist ein netzbasierter Dienst zur Versionsverwaltung für Software-Entwicklungsprojekte.

Vulnerabilities 2

  • High 7.1
    CVE-2026-1999 Public exploit

    Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed unauthorized merging of pull requests

    An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed an attacker to merge their own pull request into a repository without having push access by exploiting an authorization bypass in the enable_auto_merge mutation f…

    GitHub Enterprise Server
  • Medium 6.0
    CVE-2026-1355

    Missing Authorization Check in GitHub Enterprise Server Allows Unauthorized Uploads to Repository Migration Exports

    A Missing Authorization vulnerability was identified in GitHub Enterprise Server that allowed an attacker to upload unauthorized content to another user’s repository migration export due to a missing authorization check in the repository migration upload endp…

    GitHub Enterprise Server

Revision history

  1. #1

    Initiale Fassung

References