CVE-2026-58314

Two SSRF findings in Gitea 1.26.2

Two SSRF findings in Gitea 1.26.2

We have discovered 777 live websites that are affected by CVE-2026-58314.

Run a Free Instant Scan



Affected Software

Product  Gitea
Category Dev Tools
Vulnerable Domains777 live websites (100% of Gitea install base)
Vulnerable Versions
  • from 0 through 1.26.4
Vulnerable Versions Count66 versions ( 100% of all versions)


Common Weakness Enumeration

CWE-918 Server-Side Request Forgery (SSRF)



Details

  • Published - Aug 13, 2026
  • Updated - Aug 14, 2026

Credits

  • xclow3n (reporter)

Website Distribution by Country

Number of websites using CVE-2026-58314
United States192 websites


Germany206 websites
France104 websites
Russia47 websites
Singapore42 websites
China23 websites
Czech Republic18 websites
Netherlands16 websites
GB15 websites
Canada10 websites

Website Distribution by TLD

Number of websites using CVE-2026-58314
.com191 websites
.net78 websites
.org77 websites
.de77 websites
.ru32 websites
.fr27 websites
.eu16 websites
.nl14 websites
.io12 websites
.cz11 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2026-58314

Top websites that are affected by CVE-2026-58314. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
***.********.com United States***,***
***.*************.org United States***,***
*****.**********.eu Germany***,***
***.*******.net United States***,***
******************.com United States*,***,***
**********.es France*,***,***
****.********.ch Switzerland*,***,***
***.*******.fi Finland*,***,***
***.*********.rip Germany*,***,***
***.************.com France*,***,***
See full domain list

FAQ

CVE-2026-58314 is Server-Side Request Forgery (SSRF) in Gitea
A total of 777 websites have been identified as vulnerable to CVE-2026-58314, based on global website indexing conducted by WebTechSurvey.
The Gitea is affected by the CVE-2026-58314 vulnerability.
Gitea versions up to and including 1.26.4 are vulnerable to CVE-2026-58314.