Home › CVE Intelligence › CVE-2026-56755
CVSS 7.5 HIGH Security Vulnerability

CVE-2026-56755: Gitea: Denial of Service (CPU & Memory Exhaustion) via O(N^2) String Concatenation in Deb…

Gitea's Debian package registry parser contains an unbounded decompression vulnerability in [ParseControlFile](https://github.com/go-gitea/gitea/blob/689ace1ce28fd74244b8aa335d9928cdbf6b22f9/modules/packages/debian/meta…

7.5CVSS Score
HIGHSeverity
NOCISA KEV
Security VulnerabilityImpact Type

📋 Vulnerability Details

CVE IDCVE-2026-56755
VendorUnknown Vendor
Affected ProductUnknown Product
Vulnerability TypeSecurity Vulnerability
CVSS Score7.5 (HIGH)
Actively Exploited❌ No known exploitation
Patch StatusPending Vendor Disclosure
Reported ByCYBERDUDEBIVASH SENTINEL APEX Intelligence (via sentinel_apex)

🔬 Technical Analysis

Gitea's Debian package registry parser contains an unbounded decompression vulnerability in [ParseControlFile](https://github.com/go-gitea/gitea/blob/689ace1ce28fd74244b8aa335d9928cdbf6b22f9/modules/packages/debian/metadata.go#L140). When processing an uploaded .deb file, the p... [Full analysis available on Pro]

🎯 Known Indicators of Compromise

{"type":"sha1","value":"689ace1ce28fd74244b8aa335d9928cdbf6b22f9","confidence_score":0.9,"first_seen":"2026-07-22","source_count":1} {"type":"url","value":"https://github.com/go-gitea/gitea/blob/689ace1ce28fd74244b8aa335d9928cdbf6b22f9/modules/packages/deb","confidence_score":0.82,"first_seen":"2026-07-22","source_count":1}
⚡ DETECTION RULES AVAILABLE

Get CVE-2026-56755 Detection Pack

Sigma rules, YARA signatures, IOC table, and SIEM queries for Splunk, Elastic, Sentinel, and Chronicle — deployable in 5 minutes.

✓ Sigma Rules ✓ YARA Pack ✓ IOC Table ✓ SIEM Queries
🛡️ Get Detection Pack → 🔌 Access via API →

🔗 Related Intelligence