Hoch 8.8Software
CVE-2026-76851
A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed remote code execution on the instance.
Enterprise Server
A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed remote code execution on the instance. Insufficient network isolation allowed malicious pre-receive hook code to impersonate an internal service and redirect trusted internal requests to a privileged service, leading to elevated code execution. Exploitation required pre-receive hook networking to be enabled and either site administrator privileges or write access to a…
2. Sep 2026
Original bei NVD öffnenAusgewertete Quellen
- NVDCVE-2026-76851
- GitHubhttps://docs.github.com/en/enterprise-server@3.17/admin/release-notes#3.17.20
- GitHubhttps://docs.github.com/en/enterprise-server@3.18/admin/release-notes#3.18.14
- GitHubhttps://docs.github.com/en/enterprise-server@3.19/admin/release-notes#3.19.11
- GitHubhttps://docs.github.com/en/enterprise-server@3.20/admin/release-notes#3.20.7
- GitHubhttps://docs.github.com/en/enterprise-server@3.21/admin/release-notes#3.21.5