CVE-2026-28740
HIGH
NVD
CVSS Score
7.1
Severity
HIGH
Published
Jul 03, 2026
Vendor
unknown
Description
Gitea versions up to and including 1.26.2 allow Git LFS object reuse to authorize private source objects for users who have repository access but lack Code-unit access.