CVE-2026-77987Suited to automated attack · CISA
GitHub Enterprise Server notebook viewer vulnerable to Server-side request forgery
CVSS score
9.3
EPSS probability
%0.9
Risk score
0.1
Published
23 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.8
CVE-2024-22051
Integer overflow in Gjtorikian Commonmarker
G
Patch verifiedEPSS %1
8.7
CVE-2026-18428
SQL Query Validation Bypass in OpenSearch Direct Query
A
Patch verifiedEPSS %1
8.8
CVE-2026-17556
Path traversal in GitHub Enterprise Server allowed unauthenticated deletion of instance storage via the X-GitHub-Request-Id header
G
Patch status unknownEPSS %1
7.7
CVE-2026-76851
Server-Side Request Forgery vulnerability in GitHub Enterprise Server allowed remote code execution via network access from pre-receive hooks to internal services
G
Patch status unknownEPSS %1
7.5
CVE-2026-47427
NULL pointer dereference in GitHub Mcp Server
G
Patch verified Public Exploits:1EPSS %1
7.7
CVE-2026-19118
Race condition vulnerability was identified in GitHub Enterprise Server that allowed remote code execution
G
Patch status unknownEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-77987"