CVE-2026-26247
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Jul 03, 2026
Vendor
unknown
Description
Gitea versions before 1.25.5 do not persist the OAuth2 PKCE S256 challenge method correctly during authorization, allowing token exchange without the expected verifier check.