CVE-2026-58432

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

September 26, 2026

Last Seen

September 26, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical RCE Vulnerability in Forgejo Fixed in Versions 16.0.4 and 15.0.860.8

On September 10, 2026, a critical remote code execution vulnerability (CVE-2026-89094) was discovered in Forgejo, affecting versions prior to 16.0.4. The flaw allowed attackers to exploit the repository creation process by manipulating template repositories to execute arbitrary code on the server. T...