Exploit for Lab-001-Gitea-CVE-2026-20896-

kitploit · 2026-08-28

Description

Gitea affected by vulnerability CVE-2026-20896.

Entry point

ParameterX-WEBAUTH-USER · header

Path/

Authentication bypass via reverse proxy header when reverse proxy auth is enabled and TRUSTED_PROXIES wildcard is set

All known vulnerabilities by product

Gitea

CVSS 9.8 for CVE-2026-20896

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

EPSS Score

2.8%higher than 85.2% of all CVEs

Updated 2026-08-31

CVE Information

CVE-2026-20896

Exploit Details

Modified:2026-08-28 16:11

Last Seen:2026-08-28 17:31

Reporter:KitPloit

Other exploits for CVE-2026-20896

CVE-2026-20896

2026-09-12 KitPloitKITPLOIT

CVE-2026-20896

2026-09-09 KitPloitKITPLOIT

CVE-2026-20896

2026-09-09 KitPloitKITPLOIT

cve-2026-20896-gitea-poc

2026-09-07 KitPloitKITPLOIT

CVE-2026-20896

2026-09-07 KitPloitKITPLOIT

CVE-2026-20896-Gitea-Authentication-Bypass

2026-09-06 KitPloitKITPLOIT

Exploit for CVE-2026-20896

2026-08-21 yym8538GITHUB

Exploit for CVE-2026-20896

2026-08-15 judgedbykiraGITHUB

Exploit Code

MARKDOWN2 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-LITE-OS15-LAB-001-GITEA-CVE-2026-20896-
# Lab-001-Gitea-CVE-2026-20896-

Exploit Code

Share

Share on social media: