CVE-2026-58426

CVE

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

July 4, 2026

Last Seen

July 5, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Vulnerability CVE-2026-58426 Discovered in Gitea Actions Artifacts V466.6

CVE-2026-58426, published on July 3, 2026, reveals a critical vulnerability in Gitea Actions Artifacts V4. This flaw allows attackers to exploit HMAC ambiguities in signed URLs, enabling unauthorized cross-repository artifact reads and task state modifications. The vulnerability has been assigned a...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical Vulnerability CVE-2026-58426 Discovered in Gitea Actions Artifacts V4

Jul 5·2 sources

Related Articles (2)

CVE-2026-58426 - Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write Latest Vulnerabilities / 1d CVE ID : CVE-2026-58426 Published : July 3, 2026, 8:54 p.m. 3 hours, 25 minutes ago Description : Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write Severity: 0.0 NA Visit the link for more details, such as CVSS details, affected products, timeline, and mo

cvefeed.io·Jul 5

CVE-2026-58426 - Exploits & Severity

Related Entities

Zero-day Exploit CWE-347 - Improper Verification of Cryptographic Signature Gitea Gitea Actions Artifacts HMAC Ambiguity