CVE-2026-20736

HighCVSS 7.5/10Last modified Jul 15, 2026

Description

Gitea does not properly verify repository context when deleting attachments. A user who previously uploaded an attachment to a repository may be able to delete it after losing access to that repository by making the request through a different repository they can access.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-284

Affected software

VendorProductVersions
GiteaGitea Open Source Git Server<= 1.25.3
Red HatOpenShift Pipelines—
Red HatOpenShift Pipelines—
Red HatOpenShift Pipelines—
Red HatOpenShift Pipelines—
Red HatOpenShift Pipelines—
Red HatOpenShift Pipelines—
Red HatOpenShift Pipelines—
Red HatOpenShift Pipelines—
Red HatOpenShift Pipelines—

References

Timeline

Published
Jan 22, 2026
Last modified
Jul 15, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-207377.9Exposure of sensitive information to an unauthorized actor for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: DeviceCVE-2026-207388.5Untrusted pointer dereference for some Intel(R) QuickAssist Adapter 8960 software before version 1.13 within Ring 3: User Applications may aCVE-2026-207397.4Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of seCVE-2026-20746.3A vulnerability was identified in O2OA up to 9.0.0. This impacts an unknown function of the file /x_program_center/jaxrs/mpweixin/check of tCVE-2026-207417.4Improper access control for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. UnpriviCVE-2026-207428.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote cCVE-2026-207449.8The charging station websocket endpoint accepts connections without proper authentication, which could lead to privilege escalation.CVE-2026-207457.4Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service.CVE-2026-207466.3Virtual attribute handling in Ping Identity PingDirectory in affected versions allows only authorized users to exhaust java memory heap whenCVE-2026-207476.5Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. NetwoCVE-2026-207488.6The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the saCVE-2026-207498.8Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow an escalation of privilege. Netwo