RCE

2 posts

Your defenses are now executing for the attacker.

Forgejo 16.0.3 and earlier carry a critical RCE. The vulnerable version is the exposure, and running a build above the range is the only confirmed mitigation.

Sep 10, 2026

Article

CVE-2026-3854 puts GitHub inside your trust boundary

CVE-2026-3854 enables RCE on GitHub.com and Enterprise Server. Why platform compromise becomes customer compromise across identity, secrets, and artefacts.

Apr 29, 2026