https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:56:42.078882+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-292629 EUVD-2026-292629 2026-10-02T14:56:42.130876+00:00 EUVD-2026-292629 https://cve.radiocsirt.org/vuln/fkie_cve-2026-5845 fkie_cve-2026-5845 2026-10-02T14:56:42.130910+00:00

An improper authorization vulnerability in scoped user-to-server (ghu_) token authorization in GitHub Enterprise Server allows an authenticated attacker to access private repositories outside the intended installation scope, which can include write operations, via an authorization fallback that treated a revoked/deleted installation as a global installation context, which could be chained with token revocation timing and SSH push attribution to obtain and reuse a victim-scoped token. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.21 and was fixed in versions 3.20.1, 3.19.5, 3.18.8, 3.17.14, 3.16.17, 3.15.21, and 3.14.26. This vulnerability was reported via the GitHub Bug Bounty program.

 https://cve.radiocsirt.org/vuln/ghsa-29qm-pmxx-2p86 GHSA-29qm-pmxx-2p86 2026-10-02T14:56:42.130944+00:00

An improper authorization vulnerability in scoped user-to-server (ghu_) token authorization in GitHub Enterprise Server allows an authenticated attacker to access private repositories outside the intended installation scope, which can include write operations, via an authorization fallback that treated a revoked/deleted installation as a global installation context, which could be chained with token revocation timing and SSH push attribution to obtain and reuse a victim-scoped token. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.21 and was fixed in versions 3.20.1, 3.19.5, 3.18.8, 3.17.14, 3.16.17, 3.15.21, and 3.14.26. This vulnerability was reported via the GitHub Bug Bounty program.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1231 WID-SEC-W-2026-1231 — Microsoft GitHub Enterprise: Mehrere Schwachstellen 2026-10-02T14:56:42.130965+00:00

Ein Angreifer kann mehrere Schwachstellen in Microsoft GitHub Enterprise ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um beliebigen Programmcode auszuführen, und um Informationen offenzulegen.