Skip to content
OpenAdvisories

Archive

3 July 2026

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 9.0
    CVE-2026-58289 Public exploit

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  • Critical 9.6
    CVE-2026-22874 Public exploit

    Gitea webhook and migration allow-list filtering permits SSRF

    Gitea versions up to and including 1.26.2 have incomplete SSRF protection in webhook and migration allow-list filtering.

  • Critical 9.8
    CVE-2026-20896 Public exploit Scanner template

    Gitea Docker image trusts spoofable reverse-proxy headers by default

    Gitea Docker image versions up to and including 1.26.2 use REVERSE_PROXY_TRUSTED_PROXIES=* by default, allowing any source IP to impersonate a user when reverse-proxy authentication headers such as X-WEBAUTH-USER are enabled.