A single git push command. That is all it would have taken for someone with write access to a repository on GitHub Enterprise ...

Sometime in early 2026, a flaw hiding inside one of the most routine actions in software development went live on the world’s ...

CVE-2026-3854 (CVSS 8.7) enabled GitHub RCE via git push, risking cross-tenant access to millions of repositories.

The now‑patched flaw allowed authenticated users to execute arbitrary code via crafted git push requests, affecting ...

A critical remote code execution flaw in GitHub allowed users to gain access to millions of repositories and compromise ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...