CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-07-04 (13)

2026-07-04 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-07-04

13 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-57983 — 10.0 — Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
  • CVE-2026-20896 — 9.8 — Gitea Docker image versions up to and including 1.26.2 use REVERSE_PROXY_TRUSTED_PROXIES=* by default, allowing any source IP to impersonate a user when reverse-proxy authentication headers such as X-WEBAUTH-USER are ena…
  • CVE-2026-26292 — 9.8 — Gitea versions before 1.25.5 do not use the migration HTTP transport for LFS push and sync mirror operations, bypassing the configured migration transport protections for those LFS requests.
  • CVE-2026-27780 — 9.8 — Gitea versions before 1.26.0 do not fail closed on bufio.Scanner errors while processing pre-receive hook input, allowing oversized input to bypass branch-protection checks.
  • CVE-2026-22874 — 9.6 — Gitea versions up to and including 1.26.2 have incomplete SSRF protection in webhook and migration allow-list filtering.
  • CVE-2026-58426 — 9.6 — Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write
  • CVE-2026-20706 — 9.1 — Gitea versions up to and including 1.26.1 allow repository archive downloads to bypass token scope checks on the web archive download endpoint.
  • CVE-2026-22547 — 9.1 — Gitea versions before 1.25.5 lack validation constraints for repository creation fields, including length-limited template fields and trust model or object format values.
  • CVE-2026-25718 — 9.1 — Gitea versions before 1.25.5 mishandle path resolution during template repository generation, allowing template processing to read or write through symlinked or otherwise non-regular paths.
  • CVE-2026-26232 — 9.1 — Gitea versions before 1.25.5 do not consistently enforce OAuth2 authorization code expiry and single-use behavior during token exchange.
  • CVE-2026-26247 — 9.1 — Gitea versions before 1.25.5 do not persist the OAuth2 PKCE S256 challenge method correctly during authorization, allowing token exchange without the expected verifier check.
  • CVE-2026-58289 — 9.0 — Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
  • CVE-2026-53362 — 7.8 — In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path In __ip6_append_data(), when the paged-allocation branch is taken (MSG_MORE / NETIF_F_SG / large … [KEV]

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.