Security Advisory

CVE-2026-89094

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-09-10 20:42:18

Last updated 2026-09-10 20:47:09

Assigner mitre

CVSS score 9.9

State PUBLISHED

Description

Forgejo before 16.0.4 allows remote code execution via a crafted template repository because template expansion on files in .forgejo/template is mishandled.

← Browse all CVEs View on cve.org ↗