#cve-2026-3854

0 stories this week · 0 this month · 1 in 6 months · mostly security

Stories per day · 30 days

6 stories, newest first · one card per story

Cyber Security NewsSep 14, 2026high

GitHub Pays $100,000 Bounty for Critical RCE Flaw in Git Push Pipeline

GitHub paid Saif Ghani $100,000 for CVE-2026-3854, a critical unauthenticated RCE in its Git push pipeline allowing command execution on backend infrastructure.

3 min readbug-bounty coordinated-disclosure

The Hacker NewsMay 5, 2026critical

⚡ Weekly Recap: AI-Powered Phishing, Android Spying Tool, Linux Exploit, GitHub RCE & More

Exploited15 min readcve-2026-31431 cve-2026-32202

Help Net SecurityMay 3, 2026critical

Week in review: High-severity LPE vulnerability in the Linux kernel, cPanel 0-day exploited for months

Exploited15 min readcve-2026-21510 cve-2026-21513

Help Net SecurityApr 29, 2026high

88% of self-hosted GitHub servers exposed to RCE, researchers warn (CVE-2026-3854)

2 min readcve-2026-3854 vulnerability

Security AffairsApr 28, 2026critical

CVE-2026-3854 GitHub flaw enables remote code execution

4 min readcve-2026-3854 vulnerability

The Hacker NewsApr 28, 2026critical

Researchers Discover Critical GitHub CVE-2026-3854 RCE Flaw Exploitable via Single Git Push

3 min readcve-2026-3854 vulnerability

Stories tagged #cve-2026-3854