GitHub Enterprise Server has multiple critical vulnerabilities that allow attackers to access private repositories, bypass OAuth validation, execute arbitrary OS commands, and extract sensitive environment variables.

🚨 EUVD-2026-24550 📊 Score: 5.3/10 (CVSS v3.1) 📦 Product: Enterprise Server, Enterprise Server, Enterprise Server (+4 more) 🏢 Vendor: GitHub 📅 Updated: 2026-04-21 📝 An improper authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated attacker to determine the names of private repositories by their numeric ID. The mobile ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24550 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-24554 📊 Score: 8.9/10 (CVSS v3.1) 📦 Product: Enterprise Server, Enterprise Server, Enterprise Server (+4 more) 🏢 Vendor: GitHub 📅 Updated: 2026-04-21 📝 A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an attacker to extract sensitive environment variables from the instance through a timing side... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24554 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-24545 📊 Score: 7.5/10 (CVSS v3.1) 📦 Product: Enterprise Server, Enterprise Server, Enterprise Server (+4 more) 🏢 Vendor: GitHub 📅 Updated: 2026-04-21 📝 An incorrect regular expression vulnerability was identified in GitHub Enterprise Server that allowed an attacker to bypass OAuth redirect URI validation. An attacker with knowledge of a first-party OA... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24545 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-24547 📊 Score: 8.1/10 (CVSS v3.1) 📦 Product: Enterprise Server, Enterprise Server, Enterprise Server (+4 more) 🏢 Vendor: GitHub 📅 Updated: 2026-04-21 📝 An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed an authenticated Management Console administrator to execute arbitrary OS commands v... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24547 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-24552 📊 Score: 7.2/10 (CVSS v3.1) 📦 Product: Enterprise Server, Enterprise Server, Enterprise Server (+4 more) 🏢 Vendor: GitHub 📅 Updated: 2026-04-21 📝 An improper authorization vulnerability in scoped user-to-server (ghu_) token authorization in GitHub Enterprise Server allows an authenticated attacker to access private repositories outside the inten... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24552 #cybersecurity #infosec #euvd #cve #vulnerability