Sploitus

CVE-2026-28744

No indexed exploits for CVE-2026-28744 yet

Gitea versions up to and including 1.26.1 allow Git smart HTTP requests authenticated with bearer tokens to bypass repository token scope checks.

Affected products
Gitea, Red Os
Fix
Available
CVSS 3.1
8.1 HIGH
EPSS
0.3% (27th percentile)
Weakness
CWE-863
NVD status
Deferred
Published
2026-07-03
CVE-2026-28744 at NVD
Authoritative description, scoring and affected products

No indexed exploits for CVE-2026-28744 yet

Our index is partial: it proves presence, never absence

No exploit for CVE-2026-28744 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.