Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries
Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries Ravie LakshmananSep 14, 2026Cyber Espionage / Vulnerability A Chinese threat…
Tag: CVE-2026-60004
Critical Gitea RCE CVE-2026-60004 Actively Exploited in Cryptojacking Campaign
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical remote code execution vulnerability in Gitea, tracked as CVE-2026-60004 (CVSS…
CVE-2026-60004 — Gitea Code Injection Vulnerability
Gitea Code Injection Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on…
Critical Gitea Flaw Lets Unauthenticated Attackers Read Server Files via Org-Mode Markup
A critical vulnerability in Gitea, the self-hosted Git platform, allows unauthenticated attackers to read arbitrary files accessible to the service account. Tracked…
⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water-System Attacks and Dangling DNS Hijacks
⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water-System Attacks and Dangling DNS Hijacks Ravie LakshmananAug 03, 2026Cybersecurity / Hacking This…
Critical Gitea RCE Vulnerability CVE-2026-60004 Allows Repository Writers to Execute Shell Commands via Git Hooks
A critical remote code execution (RCE) vulnerability, tracked as CVE-2026-60004 with a CVSS score of 9.8, has been patched in Gitea, the…