Critical Gitea RCE CVE-2026-60004 Actively Exploited in Cryptojacking Campaign
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical remote code execution vulnerability in Gitea, tracked as CVE-2026-60004 (CVSS…
Tag: DevOps
Critical Gitea Flaw Lets Unauthenticated Attackers Read Server Files via Org-Mode Markup
A critical vulnerability in Gitea, the self-hosted Git platform, allows unauthenticated attackers to read arbitrary files accessible to the service account. Tracked…
Critical Gitea RCE Vulnerability CVE-2026-60004 Allows Repository Writers to Execute Shell Commands via Git Hooks
A critical remote code execution (RCE) vulnerability, tracked as CVE-2026-60004 with a CVSS score of 9.8, has been patched in Gitea, the…
GitLab Community Edition (CE): Open-Source DevOps Platform
GitLab Community Edition is the open-source version of GitLab's DevOps platform. It is affected by CVE-2026-19478 in versions prior to 18.11.11, 19.0.8,…
GitLab Enterprise Edition (EE): Commercial DevOps Platform
GitLab Enterprise Edition offers additional features for large organizations. It is vulnerable to CVE-2026-19478 in versions before 18.11.11, 19.0.8, 19.1.6, and 19.2.4.…
GitLab: DevOps Platform and Vulnerability Response
GitLab is a leading DevOps platform providing source code management, CI/CD, and security features. It recently addressed a critical vulnerability (CVE-2026-19478) affecting…
Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure
Threat actors have been observed attempting to exploit a recently patched critical security flaw in Gitea Docker images, according to Sysdig. The…
Kubernetes: Container Orchestration Platform
An open-source platform for automating deployment, scaling, and management of containerized applications. Argo CD is commonly used to manage Kubernetes resources.