Product by Microsoft

    Github Enterprise Server

    20 known vulnerabilities in Github Enterprise Server (Microsoft), 0 of them actively exploited (CISA KEV).

    Key figures

    20

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Github Enterprise Server (Microsoft)
    CriticalCVE-2026-9312

    GitHub Enterprise Server: Server-Side Request Forgery (SSRF)

    also in 1 other product

    		8.2
    CriticalCVE-2026-77987

    GitHub Enterprise Server notebook viewer vulnerable to Server-side request forgery

    also in 1 other product

    		9.8
    HighCVE-2026-15343

    GitHub Enterprise Server: Path Traversal

    also in 1 other product

    		—
    HighCVE-2026-76851

    GitHub Enterprise Server: Server-Side Request Forgery (SSRF)

    also in 1 other product

    		8.8
    CriticalCVE-2026-17556

    GitHub Enterprise Server: Path Traversal

    also in 1 other product

    		9.1
    HighCVE-2026-19118

    GitHub Enterprise Server: Time-of-check Time-of-use (TOCTOU) Race Condition

    also in 1 other product

    		7.5
    HighCVE-2026-96890

    GitHub Enterprise Server: Server-Side Request Forgery (SSRF)

    also in 1 other product

    		8.8
    HighCVE-2026-18730

    GitHub Enterprise Server: Server-Side Request Forgery (SSRF)

    also in 1 other product

    		7.4
    HighCVE-2026-104608

    GitHub Enterprise Server: Use After Free

    also in 1 other product

    		—
    MediumCVE-2026-103620

    GitHub Enterprise Server: Missing Authorization

    also in 1 other product

    		6.5
    MediumCVE-2026-15007

    GitHub Enterprise Server: Allocation of Resources Without Limits or Throttling

    also in 1 other product

    		—
    HighCVE-2026-8606

    Server-Side Request Forgery in GitHub Enterprise Server via Advisory Package URL Endpoint

    also in 1 other product

    		5.9
    HighCVE-2026-77912

    GitHub Enterprise Server: Cross-site Scripting

    also in 1 other product

    		5.4
    MediumCVE-2026-75101

    GitHub Enterprise Server: Authorization Bypass Through User-Controlled Key

    also in 1 other product

    		6.5
    MediumCVE-2026-9132

    GitHub Enterprise Server: Missing Authorization

    also in 1 other product

    		6.5
    MediumCVE-2026-118237

    GitHub Enterprise Server: Out-of-bounds Read

    also in 1 other product

    		—
    MediumCVE-2026-15783

    GitHub Enterprise Server: Missing Authorization

    also in 1 other product

    		—
    MediumCVE-2026-110288

    GitHub Enterprise Server: Cross-Site Request Forgery (CSRF)

    also in 1 other product

    		—
    MediumCVE-2026-10585

    GitHub Enterprise Server: Cross-site Scripting

    also in 1 other product

    		5.4
    MediumCVE-2026-9106

    GitHub Enterprise Server: User Interface (UI) Misrepresentation of Critical Information

    also in 1 other product

    		5.5

    All products by Microsoft