Gitea Actions Artifacts HMAC Ambiguity is a vulnerability tracked across 1 threat cluster and 1 intelligence report mention on ThreatCluster. First observed July 4, 2026; most recent activity July 4, 2026.
CVE-2026-58426, published on July 3, 2026, reveals a critical vulnerability in Gitea Actions Artifacts V4. This flaw allows attackers to exploit HMAC ambiguities in signed URLs, enabling unauthorized cross-repository…