Is CVE-2026-20896 in the CISA Known Exploited Vulnerabilities catalog?

CVE-2026-20896 is not currently listed in the CISA KEV catalog.

Vulnerability intelligence

CVE-2026-20896

A CVSS 9.8 authentication bypass in Gitea Docker images was under active probing within 13 days of disclosure. The flaw requires a non-default configuration — but the Docker image ships with that configuration enabled.

2026

What WebPulse reported · 1 analysis

Gitea Docker Flaw: From Disclosure to Active Probing in 13 Days

A CVSS 9.8 authentication bypass in Gitea Docker images was under active probing within 13 days of disclosure. The flaw requires a non-default configuration — b

July 8, 2026

View CVE-2026-20896 on the NIST National Vulnerability Database →

Related vulnerabilities

CVE-2026-9082 CVE-2026-8206 CVE-2026-50549 CVE-2026-50548 CVE-2026-48019 CVE-2026-35273 CVE-2026-11645 CVE-2026-8181