cvefeed.io Critical Vulnerability CVE-2026-58426 Discovered in Gitea Actions Artifacts V4
Article Content
- •CVE-2026-58426 has a CVSS score of 9.6, indicating critical severity.
- •The vulnerability allows unauthorized access to artifacts and task state modifications.
- •No public exploits or patches are currently available for this vulnerability.
CVE-2026-58426, published on July 3, 2026, reveals a critical vulnerability in Gitea Actions Artifacts V4. This flaw allows attackers to exploit HMAC ambiguities in signed URLs, enabling unauthorized cross-repository artifact reads and task state modifications. The vulnerability has been assigned a CVSS base score of 9.6, indicating its high severity. Currently, there are no public proof-of-concept exploits or patches available. Analysts are advised to monitor Gitea's official channels for updates. The scope of impact includes all versions of Gitea Actions Artifacts V4 up to 1.26.1. The lack of mitigation details raises concerns about potential exploitation in the wild.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track CVE-2026-58426 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…