Skip to content
COOEY

FAIL › dossier

enterprise server

PRODUCT

· dossier confidence 0%

null

PROFILE
Categoryenterprise serverWhat they donull
SECURITY POSTURE

null

Notable failures
  • CVE-2026-17556: Unauthenticated file deletion via path traversal in X-GitHub-Request-Id header
  • CVE-2023-4501: Ineffective user authentication with username and password credentials
Patterns: critical unauthenticated RCE and file deletion via header manipulation; ineffective authentication bypasses
FAILURE HISTORY · 3
DATEEVENTSEVSUMMARY
2026-09-22 CVE-2026-77987 critical GitHub Enterprise Server's notebook viewer allowed SSRF to internal services, enabling secret extraction and remote code execution.
2026-08-05 CVE-2026-17556 critical Unauthenticated attackers could delete arbitrary files on GitHub Enterprise Server via path traversal in the X-GitHub-Request-Id header.
2023-09-12 CVE-2023-4501 critical CVE-2023-4501: User authentication with username and password credentials is ineffective in Ope
Open questions: Company identity for CVE-2026-17556 and CVE-2023-4501 · Company identity for enterprise server product · Company identity for GitHub Enterprise Server
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-09-22 05:13:54.493780+00:00