Question 1

What is CVE-2026-25779 — CVE-2026-25779?

Accepted Answer

Gitea versions up to and including 1.25.4 allow redirect bypasses through raw or percent-encoded backslashes in redirect_to values.

Question 2

What is the authoritative source for CVE-2026-25779?

Accepted Answer

CVE-2026-25779 (CVE-2026-25779) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-25779CVE-2026-25779

Description