CVE-2026-70407 Blast Radius

MEDIUM • CVSS 4.3Gitea's organization-list API does not enforce the read:organization token scope. A token limited to another category, such as read:misc, can retrieve…

Is Your Infrastructure Using These Packages?

EchelonGraph automatically scans your cloud infrastructure and SBOMs to map your exposure to vulnerabilities like CVE-2026-70407.

Book a Demo →← Back to CVE-2026-70407