Improper access control
CVSS score
9.8
EPSS probability
%2.8
Risk score
0.3
Published
3 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Nuclei: Gitea Docker Image <= 1.26.2 - Reverse Proxy Header Authentication Bypass
An explanation and PoC to exploit CVE-2026-20896 Authentication Bypass Vulnerability on Gitea. Being able to steal session tokens for valid users in the Gitea instance.
Public PoC and detector for CVE-2026-20896 ("Gitea Docker: One Header, Any User")
CVE-2026-20896 Gitea Docker X-WEBAUTH-USER auth bypass checker
this is a modified POC of rz1027 for CVE-2026-20896
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-20896"