Sunday 26 July 2026 11:06:40 GMT+02:00

Netcrook

HomeManifesto
News
Corporate Security IncidentsCloud, SaaS & Identity SecurityIndustrial Cybersecurity & Critical InfrastructureCyber Intelligence, TrendsAI Security & Agentic SystemsCyber Intelligence & Threat TrendsCyber WarfareCyber Warfare & Nation-State OperationsCyber CriminalityBreaches & Data LeaksCybercrimeMalware & BotnetsRansomware & ExtortionSecurity Awareness & Social EngineeringLegal PolicyLegal, Policy & Government CybersecurityPrivacy, Regulation & ComplianceTechnology, InnovationTechnology, Innovation & Digital InfrastructureVulnerabilities Patch ManagementResearch, Exploits & Offensive SecurityVulnerabilities & Patch Management
Techcrook
Tutte le tecnologieIdentita e accessoFirewall e reteBackup e archiviazioneEnergia e continuitaPrivacy e sicurezza fisicaLaboratorio e prototipazioneStampa e tracciabilitaTecnologia quotidiana
Geocrook
AfricaAsiaEuropeMiddle EastNorth AmericaOceaniaSouth America
WikicrookTeamAppContactLogin
EnglishItaliano

#CVE-2026-58443

Gitea’s Permission Slip That Reached the Wrong Branch

21 July 2026 12:34Vulnerabilities & Patch ManagementNEONPALADIN

A critical authorization flaw in Gitea let tokens meant for public repositories indirectly write into private ones and trigger automation there.

#Gitea | #CVE-2026-58443 | #Actions workflows

Gitea’s Permission Wall Fractures, and That Matters Far Beyond One Token

21 July 2026 10:13Vulnerabilities & Patch ManagementNEONPALADIN

A critical authorization bug in Gitea raises a familiar but dangerous question: what happens when a token that should stay on the public side of the fence can still touch private branches and CI workflows?

#Gitea | #API tokens | #Actions workflows