Event Monitor Cyber
EM-20261110-YX90 VulnerabilityHigh severity

git Vulnerability (CVE-2026-111760)

CVE-2026-111760

Share
Status
Developing

Since : signals keep joining.

First Signal
Nov 10 18:00 UTCC41 Red Hat Security Data
Page Born
Nov 10 19:23 UTCsecond source joined
Last Signal
Nov 11 14:26 UTC9 hours before snapshot
Sources
31 official · 2 research, news or crowd
Open For
21 hoursso far

Life Of This Page

  1. 1
    Born
    A second, independent source names it.
  2. 2
    Developing · Now
    New signals join; severity can move.
  3. 3
    Confirmed
    Not yet
    CISA KEV lists it, or exploitation in the wild is reported.
  4. 4
    Resolved
    Not yet
    Past the fix deadline and 14 days with no new signal.
  5. 5
    Archived
    Not yet
    30 days after resolved. Read only; the link keeps working. Reopens if it comes back.

The ID never changes, and earlier addresses keep working. A correction is logged, never overwritten. If two pages turn out to be one incident, the later one points to the earlier.

Vulnerability Lifecycle

  1. Disclosed: reached
    Nov 10 18:00 UTC
    C41 first to name it
  2. Scored: not yet
    Not yet
    No CVSS yet
  3. Exploited: not yet
    Not yet
    No exploitation reported
  4. Advisories: not yet
    Not yet
    None yet
  5. Vendor Response: reached
    Nov 10 18:00 UTC
    C41 published
  6. Resolved: not yet
    Not yet
    After 14 quiet days

Timeline

12:0018:00Nov 1106:0012:00BornC41 Red Hat Security DataC130 The Hacker NewsC134 Help Net Security

Point at a mark to read it. Squares are signals, colored by severity; every one is also listed under Signals.

Signals

  1. Git fixes six vulnerabilities, including code execution during recursive clones (opens source in a new tab) The Git project has released security updates addressing six vulnerabilities that could allow attackers to execute code, write to unintended files or cause memory corruption when Git processes malicious repositories or… Med severityResearch & NewsC134 Help Net Security
  2. Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones (opens source in a new tab) A flaw in Git can let a malicious repository run an attacker's code on a computer that clones it recursively, together with its submodules. The Git project fixed it this week in Git 2.56.1, with matching fixes for the… Med severityResearch & NewsC130 The Hacker News
  3. Red Hat: CVE-2026-111760 (important) (opens source in a new tab) git: Git: Arbitrary code execution via unsafe submodule metadata during recursive clones High severityVendorC41 Red Hat Security Data