CVE-2026-96400
With set to a matching entry such as or a hostname wildcard, Gitea's migration URL validation could permit reserved and link-local addresses, such as , even when .
Published Oct 13, 2026
With set to a matching entry such as or a hostname wildcard, Gitea's migration URL validation could permit reserved and link-local addresses, such as , even when . The local-network block list did not cover these ranges, and a hostname matching the allow list was accepted regardless of its resolved address. A user who can start migrations on such an instance could reach these addresses from the Gitea server; the default empty configuration is not affected.
Timeline
Detection, updates, and resolution for this record.
Oct 13, 2026 · Tenable CVE Database
Detected
With set to a matching entry such as or a hostname wildcard, Gitea's migration URL validation could permit reserved and link-local addresses, such as , even when . The local-network block list did not cover these ranges, and a hostname matching the allow list was accepted regardless of its resolved address. A user who can start migrations on such an instance could reach these addresses from the Gi
Sources
- CVE.orgCVE-2026-96400
Official CVE identifier
cve.org - FIRST EPSSCVE-2026-96400
30-day exploitation probability 0.2%
first.org - Tenable CVE DatabaseCVE-2026-96400
With set to a matching entry such as or a hostname wildcard, Gitea's migration URL validation could permit reserved and link-local addresses, such as , even when . The local-network block list did not cover these ranges, and a hostname matching the allow list was accepted regardless of its resolved address. A user who can start migrations on such an instance could reach these addresses from the Gi
tenable.com