Curated security research, vulnerabilities, advisories and tools for practitioners.

← back | CVE Intelligence

CVE-2026-3854

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2026-3854.

Coverage Span: 2026-04-28
Reports: 1 related reports

Associated Reports & Timeline

Securing GitHub: Wiz Research uncovers Remote Code Execution in GitHub.com and GitHub Enterprise Server (CVE-2026-3854)

CVE-2026-3854: a Wiz-discovered injection flaw let any authenticated user get RCE on GitHub's shared storage nodes via one git push; fixed within hours, but 88% of GHES instances stayed vulnerable.