SecurityLobstersabout 1 hour ago
SourceHut Patches Registration Bypass
4 min read
Security researcher discloses CVE-2026-121728 affecting SourceHut instances after a 2021 code refactor introduced a logic bug. The vulnerability allows account takeover via a registration form handler that fails to check if registration is disabled. SourceHut fixed the issue on 2026-11-03, assigning CVE-2026-121728 with a CVSS score of 4.0.
Level
Hype check
Tap to vote and see what everyone thinks.