Skip to content
OpenAdvisories
High WID-SEC-2026-0685 2 CVEs

Microsoft GitHub Enterprise Server: Mehrere Schwachstellen

Published Mar 10, 2026 · Updated Mar 10, 2026 · de-DE

Vendor: Microsoft Product: GitHub Enterprise

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Microsoft GitHub Enterprise ausnutzen, um Dateien zu manipulieren und um beliebigen Code auszuführen.

Product

GitHub ist ein netzbasierter Dienst zur Versionsverwaltung für Software-Entwicklungsprojekte.

Vulnerabilities 2

  • High 8.7
    CVE-2026-3854 Public exploit EPSS 42%

    Remote code execution via git push option injection in GitHub Enterprise Server

    An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed an attacker with push access to a repository to achieve remote code execution on the instance. During a git push operation, user-supplied push…

    GitHub Enterprise Server
  • Medium 5.3
    CVE-2026-3306 Public exploit

    Improper authorization in GitHub Projects allows modification of issue and pull request metadata without repository write access

    An improper authorization vulnerability was identified in GitHub Enterprise Server that allowed a user with read access to a repository and write access to a project to modify issue and pull request metadata through the project. When adding an item to a proje…

    GitHub Enterprise Server

Revision history

  1. #1

    Initiale Fassung

References