Skip to content
OpenAdvisories
High WID-SEC-2026-4334 3 CVEs

Microsoft GitHub Enterprise Server: Mehrere Schwachstellen

Published Nov 3, 2026 · Updated Nov 3, 2026 · de-DE

Vendor: Microsoft Product: GitHub Enterprise

Summary

Ein Angreifer kann mehrere Schwachstellen in Microsoft GitHub Enterprise ausnutzen, um beliebigen Programmcode auszuführen, Daten zu manipulieren und offenzulegen oder einen Denial-of-Service-Zustand auszulösen.

Product

GitHub ist ein netzbasierter Dienst zur Versionsverwaltung für Software-Entwicklungsprojekte.

Vulnerabilities 3

  • High 7.7
    CVE-2026-104608

    Use-after-free vulnerability in GitHub Enterprise Server allowed remote code execution in the Git service

    A remote code execution vulnerability was identified in GitHub Enterprise Server in the Git service (babeld). babeld held references into internal collections while calling into the SSH library, where a re-entrant callback could modify a collection and invali…

    GitHub Enterprise Server
  • Medium 5.3
    CVE-2026-110288

    Cross-site request forgery vulnerability in GitHub Enterprise Server allowed deletion of stored ChatOps configuration through the Management Console

    A cross-site request forgery vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to delete stored Slack and Microsoft Teams ChatOps configuration and provider credentials by inducing an authenticated Management Co…

    GitHub Enterprise Server
  • Medium 5.3
    CVE-2026-118237

    Out-of-bounds read vulnerability in GitHub Enterprise Server allowed disclosure of process memory in the Git service

    An out-of-bounds read vulnerability was identified in GitHub Enterprise Server in the Git service (babeld). When proving possession of a host key, babeld's SSH implementation sized the session identifier by the current digest length rather than its own. An at…

    GitHub Enterprise Server

Revision history

  1. #1

    Initiale Fassung

References