Skip to content
OpenAdvisories

Archive

3 July 2026

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 8.9
    CVE-2026-58424 Public exploit

    Permanent Fork PR Workflow Approval Gate Bypass

    Permanent Fork PR Workflow Approval Gate Bypass

  • High 8.1
    CVE-2026-28699 Public exploit

    Gitea Basic Auth bypasses OAuth2 access token scopes

    Gitea versions up to and including 1.26.1 allow OAuth2 access token scope enforcement to be bypassed through HTTP Basic authentication.

  • High 8.2
    CVE-2026-27771 Public exploit Scanner template

    Gitea Composer package source links use insufficient permission checks

    Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information.

  • High 8.8
    CVE-2026-14459 Public exploit

    Argument Injection in TUBITAK BILGEM's pardus-software

    Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-software allows Argument Injection. This issue affects pardus-software: from <= 1.0.4 before 1.0…

  • High 7.5
    CVE-2026-8932 Public exploit

    incomplete mTLS config matching in conn reuse

    libcurl would reuse a previously created connection even when some mTLS config related option had been changed that should have prohibited reuse. libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them m…