CVE-2026-20736

HighCVSS 7.5/10Last modified Jul 15, 2026

Description

Gitea does not properly verify repository context when deleting attachments. A user who previously uploaded an attachment to a repository may be able to delete it after losing access to that repository by making the request through a different repository they can access.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-284

Affected software

Vendor	Product	Versions
Gitea	Gitea Open Source Git Server	<= 1.25.3
Red Hat	OpenShift Pipelines	—
Red Hat	OpenShift Pipelines	—
Red Hat	OpenShift Pipelines	—
Red Hat	OpenShift Pipelines	—
Red Hat	OpenShift Pipelines	—
Red Hat	OpenShift Pipelines	—
Red Hat	OpenShift Pipelines	—
Red Hat	OpenShift Pipelines	—
Red Hat	OpenShift Pipelines	—

References

Timeline

Published: Jan 22, 2026
Last modified: Jul 15, 2026
NVD status: Modified

Related CVEs from 2026

CVE-2026-207377.9Exposure of sensitive information to an unauthorized actor for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device CVE-2026-207388.5Untrusted pointer dereference for some Intel(R) QuickAssist Adapter 8960 software before version 1.13 within Ring 3: User Applications may a CVE-2026-207397.4Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of se CVE-2026-20746.3A vulnerability was identified in O2OA up to 9.0.0. This impacts an unknown function of the file /x_program_center/jaxrs/mpweixin/check of t CVE-2026-207417.4Improper access control for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Unprivi CVE-2026-207428.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote c CVE-2026-207449.8The charging station websocket endpoint accepts connections without proper authentication, which could lead to privilege escalation.CVE-2026-207457.4Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service.CVE-2026-207466.3Virtual attribute handling in Ping Identity PingDirectory in affected versions allows only authorized users to exhaust java memory heap when CVE-2026-207476.5Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Netwo CVE-2026-207488.6The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the sa CVE-2026-207498.8Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow an escalation of privilege. Netwo