https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T20:18:21.357998+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-54452 EUVD-2026-54452 2026-10-21T20:18:21.361135+00:00 EUVD-2026-54452 https://cve.radiocsirt.org/vuln/fkie_cve-2019-11576 fkie_cve-2019-11576 2026-10-21T20:18:21.361172+00:00

Gitea before 1.8.0 allows 1FA for user accounts that have completed 2FA enrollment. If a user's credentials are known, then an attacker could send them to the API without requiring the 2FA one-time password.

 https://cve.radiocsirt.org/vuln/ghsa-3393-r4p5-vhqh GHSA-3393-r4p5-vhqh — Gitea Allows 1FA Even for 2FA-Enrolled Accounts 2026-10-21T20:18:21.361205+00:00

Affected: Go: code.gitea.io/gitea

Gitea before 1.8.0 allows 1FA for user accounts that have completed 2FA enrollment. If a user's credentials are known, then an attacker could send them to the API without requiring the 2FA one-time password.

 https://cve.radiocsirt.org/vuln/gsd-2019-11576 gsd-2019-11576 2026-10-21T20:18:21.361229+00:00 gsd-2019-11576 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-11576 UBUNTU-CVE-2019-11576 2026-10-21T20:18:21.361242+00:00

Affected: Ubuntu:18.04:LTS: golang-code.gitea-git, Ubuntu:20.04:LTS: golang-code.gitea-git, Ubuntu:22.04:LTS: golang-code.gitea-git

Gitea before 1.8.0 allows 1FA for user accounts that have completed 2FA enrollment. If a user's credentials are known, then an attacker could send them to the API without requiring the 2FA one-time password.