Zero Day MonitorZDM

← Back to list

EST

PRE-CVEPATCHED

github · enterprise

GitHub Enterprise Server Multiple Vulnerabilities

72% confidence

Description

Multiple vulnerabilities addressed in GitHub Enterprise Server across multiple version branches requiring security updates

Affected Products

Vendor	Product	Versions
github	enterprise	3.21.x < 3.21.3, 3.20.x < 3.20.5, 3.19.x < 3.19.9, 3.18.x < 3.18.12, 3.17.x < 3.17.18

Related News (1 articles)

Tier B

CCCS Canada23d ago

GitHub security advisory (AV26-720)

→ No new info (linked only)

CISA KEV❌ No

Actively exploited❌ No

Patch available

3.21.33.20.53.19.93.18.123.17.18

PublishedJul 20, 2026

Last enriched23d ago

Tags

github enterprise serversecurity advisorymultiple vulnerabilities

Trending Score1

Source articles1

Independent1

Info Completeness6/14

Missing: cve_id, cvss, epss, cwe, kev, exploit, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

NONECVE-2026-17556

Path traversal in GitHub Enterprise Server allowed unauthenticated deletion of instance storage via the X-GitHub-Request-Id header

NONECVE-2026-15996

Denial of service vulnerability in GitHub Enterprise Server allowed unauthenticated service disruption via deeply nested request parameters

CRITICALCVE-2026-15343

Path traversal vulnerability in GitHub Enterprise Server allowed writing files to arbitrary repository paths, including GitHub Actions workflow files, via unchecked Dependabot dependency-file paths

NONECVE-2026-15783

Missing Authorization vulnerability was identified in GitHub Enterprise Server that allowed reading private repository metadata via delegated bypass rule suites

NONECVE-2026-15007

Denial of service vulnerability in GitHub Enterprise Server allowed service disruption via deeply nested YAML in release notes configuration

Pin to Dashboard

Verification

State: reported

Confidence: 72%

Vulnerability Timeline

CVE Published

Jul 20, 2026

Patch Available

Jul 20, 2026

Discovered by ZDM

Jul 20, 2026