Note: This data is for reference and cybersecurity research purposes only.CyStack advises users not to use this information for unlawful purposes.
CVE-2026-52806 is a vulnerability classified as Improper Neutralization of Special Elements used in a Command ('Command Injection'), affecting gogs (affected versions: < 0.14.3). This vulnerability is rated Critical, with a CVSS score of 9.9. Public exploit code or evidence is available for this vulnerability, but that does not confirm exploitation in the wild.
Analyzing data...
Gogs is an open source self-hosted Git service. Prior to 0.14.3, Gogs allows authenticated users to achieve Remote Code Execution (RCE) on the server by creating a pull request with a specially crafted branch name that injects the --exec flag into the git rebase command during the "Rebase before merging" merge operation. This vulnerability is fixed in 0.14.3.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
en
