Sploitus

CVE-2026-24451

No indexed exploits for CVE-2026-24451 yet

Gitea 1.26.2 allows fork synchronization to continue after a parent repository changes from public to private, exposing data to a fork that should no longer be authorized.

Affected products
Gitea, Red Os
CVSS 3.1
7.5 HIGH
EPSS
0.4% (28th percentile)
Weakness
CWE-200, CWE-284
NVD status
Deferred
Published
2026-07-03
CVE-2026-24451 at NVD
Authoritative description, scoring and affected products

No indexed exploits for CVE-2026-24451 yet

Our index is partial: it proves presence, never absence

No exploit for CVE-2026-24451 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.