CVE-2026-73539
— UNSCOREDpublic exploit availablePublished 2026-10-14 · Updated 2026-10-14
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
Gitea substitutes a URL derived from the markup Context field into external renderer command templates without escaping the reference path before shell-style argument splitting. A crafted Context can inject additional renderer arguments, including options that load executable filter files. On deployments using a susceptible external renderer such as pandoc, a user who can place a filter file at an accessible path can cause it to execute as the Gitea service account; the public repository markup endpoint itself can be reachable without authentication.
Weaknesses
CWE-88
Public exploit & PoC references
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-100369PoC
- HIGHCVE-2026-100561PoC
- HIGHCVE-2026-100570PoC
- CRITICALCVE-2026-100714PoC
- HIGHCVE-2026-102827PoC
- MEDIUMCVE-2026-102904PoC
- MEDIUMCVE-2026-103505PoC
- HIGHCVE-2026-104715
Related by shared AI tags and CWE weakness class. Browse the full archive.