{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-11-08T00:12:34.926","vulnerabilities":[{"cve":{"id":"CVE-2026-52806","sourceIdentifier":"security-advisories@github.com","published":"2026-06-24T21:16:56.440","lastModified":"2026-06-26T05:16:29.933","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Gogs is an open source self-hosted Git service. Prior to 0.14.3, Gogs allows authenticated users to achieve Remote Code Execution (RCE) on the server by creating a pull request with a specially crafted branch name that injects the --exec flag into the git rebase command during the \"Rebase before merging\" merge operation. This vulnerability is fixed in 0.14.3."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"gogs","product":"gogs","versions":[{"version":"< 0.14.3","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","baseScore":9.9,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.1,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-25T00:00:00+00:00","id":"CVE-2026-52806","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-77"}]}],"references":[{"url":"https://github.com/gogs/gogs/commit/a9dbafbfd8e1020bacc626420238c01d75d03364","source":"security-advisories@github.com"},{"url":"https://github.com/gogs/gogs/pull/8301","source":"security-advisories@github.com"},{"url":"https://github.com/gogs/gogs/releases/tag/v0.14.3","source":"security-advisories@github.com"},{"url":"https://github.com/gogs/gogs/security/advisories/GHSA-qf6p-p7ww-cwr9","source":"security-advisories@github.com"},{"url":"https://github.com/gogs/gogs/security/advisories/GHSA-qf6p-p7ww-cwr9","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}}]}