{"uuid": "f098320d-f3a6-4d51-83be-d54002fbd8a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3854", "type": "published-proof-of-concept", "source": "https://t.me/zhatez/2570", "content": "\ud83d\udc68\u200d\ud83d\udcbb GitHub RCE Vulnerability: CVE-2026-3854 Breakdown\n\nWiz Research discovered CVE-2026-3854 (CVSS 8.7): an unsanitized semicolon injection in GitHub's\u00a0X-Stat\u00a0internal header allows any authenticated user to override security fields via\u00a0git push -o, achieving RCE on GitHub com and full GHES server compromise.\n\nhttps://www.wiz.io/blog/github-rce-vulnerability-cve-2026-3854\n\n#github", "creation_timestamp": "2026-07-28T22:00:05.335786Z"}