← nejvýznamnější zprávy · všechny zprávy

poslední zpráva · zachyceno

SPOJENO AI EPSS 0.01 (nejvyšší)

Vulnerabilities in GitHub Enterprise Server

Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv4.0: 7.7, CVEs: CVE-2026-104608, CVE-2026-110288, Summary: CVE-2026-104608 (CVSS: 7.7): A remote code execution vulnerability was identified in GitHub Enterprise Server in the Git service (babeld). babeld held references into internal collections while calling into the SSH library, where a re-entrant callback could modify a collection and invalidate those references. An attacker with an account and SSH access to…

Číst originál na NCSC-FI →

3 zprávy z 3 zdrojů · první CZ · EN/orig

GitHub FI CA IT

tg: zranitelnost

CVE v události 3

CVEhodnoceníKEVEPSS
CVE-2026-104608 7.7 4.0 · GitHub_P – < 0.01
CVE-2026-110288 5.3 4.0 · GitHub_P – < 0.01
CVE-2026-15343 8.6 4.0 · GitHub_P – 0.01

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 7.7.

Jak se o tom psalo 3

  1. · zachyceno · NCSC-FI FI nadpis události

    Vulnerabilities in GitHub Enterprise Server

    Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv4.0: 7.7, CVEs: CVE-2026-104608, CVE-2026-110288, Summary: CVE-2026-104608 (CVSS: 7.7): A remote code execution vulnerability was identified in GitHub Enterprise Server in the Git service (babeld). babeld held references into internal collections while calling into the SSH library, where a re-entrant callback could modify a collection and invalidate those references. An attacker with an account and SSH access to…

  2. · Cyber Centre Kanada CA

    GitHub security advisory (AV26-1126)

    Serial number: AV26-1126 Date: November 4, 2026 As of November 3, 2026, GitHub is affected by vulnerabilities in the following product: Enterprise Server 3.19.0 Prior to 3.19.14 3.20.0 Prior to 3.20.10 3.21.0 Prior to 3.21.8 3.22.0 Prior to 3.22.3 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Release notes - GitHub Enterprise Server 3.19 Docs Release notes - GitHub Enterprise Server 3.20 Docs…

  3. · CSIRT Itálie (ACN) IT

    Risolte vulnerabilità in Github Enterprise server

    GitHub ha rilasciato aggiornamenti di sicurezza che risolvono diverse vulnerabilità, di cui due con gravità “alta”, in GitHub Enterprise Server, edizione on‑premises della piattaforma GitHub, progettata per ambienti aziendali con requisiti avanzati di sicurezza e conformità.