CVE-2026-26194 - Vulnerability Details

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
March 6, 2026
Last Seen
May 28, 2026

CVE-2026-26194 is a vulnerability tracked by ThreatCluster, appearing in 2 threat clusters built from 2 intelligence report mentions.

CVE-2026-26194 is a vulnerability tracked across 2 threat clusters and 2 intelligence report mentions on ThreatCluster. First observed March 6, 2026; most recent activity May 28, 2026.

Related Threat Clusters

  • Critical Zero-Day Vulnerability in Gogs Allows Remote Code Execution

    A critical argument injection vulnerability (CWE-88) has been discovered in Gogs, a widely used self-hosted Git service, allowing authenticated users to execute arbitrary code on the server. The flaw, identified by…

    10 articles · Updated May 28, 2026
  • Gogs Vulnerabilities Lead to XSS and Token Leakage Risks

    Gogs, an open source self-hosted Git service, has two critical vulnerabilities prior to version 0.14.2. CVE-2026-26276 allows attackers to execute a DOM-Based XSS via malicious HTML/JavaScript in Milestone names, while…

    4 articles · Updated March 5, 2026

Recent Intelligence Reports

  • New Gogs zero — Bleepingcomputer · May 28, 2026
  • CVE-2026-26194 — Nvd.Nist · March 6, 2026

Related Entities

Zero-day Exploit Gogs CVE-2024-39930 CVE-2024-39932 CVE-2024-39933 CVE-2025-8110 CWE-200 - Exposure of Sensitive Information CWE-287 - Improper Authentication CWE-862 - Missing Authorization T1003 - OS Credential Dumping T1021 - Remote Services T1190 - Exploit Public-Facing Application

Frequently asked questions

What is CVE-2026-26194?

CVE-2026-26194 is a vulnerability tracked by ThreatCluster, appearing in 2 threat clusters built from 2 intelligence report mentions.

Is CVE-2026-26194 still active?

The most recent intelligence report mentioning CVE-2026-26194 on ThreatCluster is dated May 28, 2026. Activity was first observed March 6, 2026, giving a tracked span from then to May 28, 2026.

What is CVE-2026-26194 associated with?

Across ThreatCluster reporting, CVE-2026-26194 most frequently co-occurs with Zero-day Exploit, Gogs, CVE-2024-39930, CVE-2024-39932, CVE-2024-39933, among 12 tracked related entities.

What are the latest developments involving CVE-2026-26194?

The most significant recent cluster is “Critical Zero-Day Vulnerability in Gogs Allows Remote Code Execution” (10 articles · Updated May 28, 2026). CVE-2026-26194 appears across 2 threat clusters in total, listed above with sources.

How much reporting does ThreatCluster have on CVE-2026-26194?

CVE-2026-26194 appears in 2 intelligence report mentions across 2 deduplicated threat clusters, aggregated from 17,000+ monitored sources.

CVSS v3.1 Breakdown