Microsoft GitHub Enterprise Server: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein Angreifer kann mehrere Schwachstellen in Microsoft GitHub Enterprise ausnutzen, um beliebigen Programmcode auszuführen, Daten zu manipulieren und offenzulegen oder einen Denial-of-Service-Zustand auszulösen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Highbsi:WID-SEC-2026-43343 linked CVEs
Open advisory with all CVEs
More on GitHub
Other advisories
- HighCVE-2026-110288Microsoft GitHub Enterprise Server: Mehrere Schwachstellen
- Not ratedosv:ROOT-APP-GOBINARY-CVE-2026-116587CVE-2026-116587 in github.com/go-jose/go-jose/v4 - Patched by Root
- Not ratedosv:ROOT-APP-GOBINARY-CVE-2026-34986CVE-2026-34986 in github.com/go-jose/go-jose/v4 - Patched by Root
- MediumCVE-2026-118237GitHub Enterprise Server: Lesen außerhalb des zugewiesenen Speichers (Out-of-bounds Read)
- MediumCVE-2026-110288GitHub Enterprise Server: Cross-Site-Request-Forgery (CSRF)
- HighCVE-2026-104608GitHub Enterprise Server: Use-After-Free
- MediumCVE-2026-118237GitHub Enterprise Server: Lesen außerhalb des zugewiesenen Speichers (Out-of-bounds Read)
- MediumCVE-2026-110288GitHub Enterprise Server: Cross-Site-Request-Forgery (CSRF)
Other news entries
- Threat actors use agentic AI tooling to find and abuse exposed secretsNewsMicrosoft Threat Intelligence
- GitBook breach: SSO flaw led to production access; all API tokens revoked, rotate integration secretsBreachpwn.watch
- Hugging Face malware campaign returns to hijack GPUs for crypto miningNewsBleepingComputer
- Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto MinersNewsThe Hacker News
- Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hourNewsThe Register — Security
- Gut getarnt: Automatisch startender Wurm bei GitHub ist schwer zu findenNewsheise Security
- GitHub Launches npm Firewall to Block Malicious Packages Before InstallationNewsThe Hacker News
- GhostAction Hacking Wave Fizzles, but Attackers Lurk on in GitHubNewsDark Reading
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4334
ID