CVE-2026-60004 – CyberSecurityBoard

Critical CVEs

Critical Gitea Flaw Lets Unauthenticated Attackers Read Server Files via Org-Mode Markup

A critical vulnerability in Gitea, the self-hosted Git platform, allows unauthenticated attackers to read arbitrary files accessible to the service account. Tracked…

critical CVE-2026-20896 CVE-2026-27771 CVE-2026-50522

August 5, 2026

Critical CVEs

⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water-System Attacks and Dangling DNS Hijacks

⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water-System Attacks and Dangling DNS Hijacks Ravie LakshmananAug 03, 2026Cybersecurity / Hacking This…

CVE-2026-10702 CVE-2026-17583 CVE-2026-18556 CVE-2026-18577

August 3, 2026

Critical CVEs

Critical Gitea RCE Vulnerability CVE-2026-60004 Allows Repository Writers to Execute Shell Commands via Git Hooks

A critical remote code execution (RCE) vulnerability, tracked as CVE-2026-60004 with a CVSS score of 9.8, has been patched in Gitea, the…

API Security application security CVE-2026-50522 CVE-2026-60004

July 29, 2026

Critical CVEs

CVE-2026-60004: Gitea Remote Code Execution

A separate remote code execution vulnerability patched in Gitea 1.27.1. Details were covered in a prior report.

CVE-2026-60004 Gitea remote code execution

July 29, 2026