Pending AI Enrichment
This vulnerability was recently detected via the live feed and has not yet been processed by Precogs AI's context enrichment engine. The data below represents raw telemetric data.
RAW NVD TELEMETRY
CVE-2026-89094
CVSS Base Score
9.9 CRITICAL
Primary Weakness
CWE-1336
Published Date
Sep 10, 2026
Data Source
NVD API
Forgejo before 16.0.4 allows remote code execution via a crafted template repository because template expansion on files in .forgejo/template is mishandled.