The Morning Dev

Only the news worth knowing

‹
 
  • AAPL 344.17 ▼ 1.53%
  • MSFT 535.93 ▼ 3.58%
  • NVDA 181.60 ▼ 9.26%
  • GOOGL 282.57 ▼ 2.20%
  • AMZN 260.21 ▼ 2.19%
  • META 605.08 ▼ 3.96%
  • TSLA 343.69 ▼ 10.77%
  • AVGO 291.53 ▼ 10.43%
  • TSM 353.10 ▼ 10.78%
  • ORCL 115.16 ▼ 6.93%
  • AMD 404.40 ▼ 17.26%
  • NFLX 65.56 ▼ 1.25%
  • CRM 222.41 ▼ 2.07%
  • ADBE 246.44 ▼ 0.82%
  • INTC 52.25 ▼ 10.33%
  • IBM 247.11 ▼ 2.84%
  • PLTR 154.99 ▼ 9.73%
  • SNOW 269.54 ▼ 7.25%
  • NET 244.51 ▼ 8.28%
  • SAP 243.53 ▲ 1.45%

SecurityFan score 20 · Tier C

SourceHut disabled registration bypass | CVE-2026-121728

Lobsters · By blog.arusekk.pl via mhm ·

Read the full story at blog.arusekk.pl ↗

The Brief

  • A registration bypass affecting SourceHut was disclosed and assigned CVE-2026-121728.
  • The disclosure was posted on Lobsters on 2026-11-05, linking to the researcher's blog post.

Why it matters

The bug allows account registration even where registration has been disabled, so operators relying on that setting to restrict access should review the disclosure.

Who’s affected

  • SourceHut users and operators with registration disabled
  • CVE-2026-121728
  • #security
  • #sourcehut
  • #registration
  • #cve
  • #vulnerability

What developers are saying

Based on 0 comments

Timeline

  1. Registration bypass disclosed as CVE-2026-121728

  2. Lobsters

    SourceHut disabled registration bypass | CVE-2026-121728

  3. Lobsters

    1 points · 0 comments

How do you feel about this?

0 Comments

    More in Community