CVE-2026-58426 - Vulnerability Details

Related Threat Clusters

• Critical Vulnerability CVE-2026-58426 Discovered in Gitea Actions Artifacts V4

  CVE-2026-58426, published on July 3, 2026, reveals a critical vulnerability in Gitea Actions Artifacts V4. This flaw allows attackers to exploit HMAC ambiguities in signed URLs, enabling unauthorized cross-repository…

  2 articles · Updated July 5, 2026

Recent Intelligence Reports

• CVE-2026-58426 - Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write Latest Vulnerabilities / 1d CVE ID : CVE-2026-58426 Published : July 3, 2026, 8:54 p.m. 3 hours, 25 minutes ago Description : Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write Severity: 0.0 NA Visit the link for more details, such as CVSS details, affected products, timeline, and mo — cvefeed.io · July 5, 2026
• CVE-2026-58426 - Exploits & Severity — Feedly · July 4, 2026

Related Entities