CVE-2026-89094
CRITICAL
NVD
CVSS Score
9.9
Severity
CRITICAL
Published
Sep 10, 2026
Vendor
unknown
Description
Forgejo before 16.0.4 allows remote code execution via a crafted template repository because template expansion on files in .forgejo/template is mishandled.