← العودة للجدول
CVE-2026-3136
CVE-2026-3136 — An improper authorization vulnerability in GitHub Trigger Comment Control in G
📅 2026-03-03
🔴 Critical 🔥 No NVD Exploit Exploit CVSS 9.8 🎯 EPSS 0.09%

📋 الوصف الكامل

An improper authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-1-26 allows a remote attacker to execute arbitrary code in the build environment. This vulnerability was patched on 26 January 2026, and no customer action is needed.

💻 الأنظمة المتأثرة

An improper authorization vulnerability

⚠️ نوع التهديد

Exploit

🔗 CVE ID

CVE-2026-3136

📡 المصدر

NVD

✅ الحلول والتخفيف

Refer to CVE-2026-3136 NVD advisory

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ←