Question 1

What is CVE-2026-26232 — CVE-2026-26232?

Accepted Answer

Gitea versions before 1.25.5 do not consistently enforce OAuth2 authorization code expiry and single-use behavior during token exchange.

Question 2

What is the authoritative source for CVE-2026-26232?

Accepted Answer

CVE-2026-26232 (CVE-2026-26232) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-26232CVE-2026-26232

Description