CVE-2026-75101
Authorization bypass vulnerability in GitHub Enterprise Server allowed reading of private pull request diffs and patches via repository name collision
CVSS score
6.0
EPSS probability
%0.3
Risk score
0.0
Published
22 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.8
CVE-2024-22051
Integer overflow in Gjtorikian Commonmarker
G
Patch verifiedEPSS %1
8.7
CVE-2026-18428
SQL Query Validation Bypass in OpenSearch Direct Query
A
Patch verifiedEPSS %1
9.3
CVE-2026-77987
GitHub Enterprise Server notebook viewer vulnerable to Server-side request forgery
G
Patch status unknownEPSS %1
8.8
CVE-2026-17556
Path traversal in GitHub Enterprise Server allowed unauthenticated deletion of instance storage via the X-GitHub-Request-Id header
G
Patch status unknownEPSS %1
7.7
CVE-2026-76851
Server-Side Request Forgery vulnerability in GitHub Enterprise Server allowed remote code execution via network access from pre-receive hooks to internal services
G
Patch status unknownEPSS %1
7.5
CVE-2026-47427
NULL pointer dereference in GitHub Mcp Server
G
Patch verified Public Exploits:1EPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-75101"