Critical Gitea RCE CVE-2026-60004 Actively Exploited in Cryptojacking Campaign
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical remote code execution vulnerability in Gitea, tracked as CVE-2026-60004 (CVSS…
Tag: Gitea
CVE-2026-60004 — Gitea Code Injection Vulnerability
Gitea Code Injection Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on…
Critical Gitea Flaw Lets Unauthenticated Attackers Read Server Files via Org-Mode Markup
A critical vulnerability in Gitea, the self-hosted Git platform, allows unauthenticated attackers to read arbitrary files accessible to the service account. Tracked…
CVE-2026-27771: Gitea Container-Registry Access-Control Flaw
A container-registry access-control flaw in Gitea estimated to affect over 30,000 deployments across more than 30 countries. Patched in May 2026.
Critical Gitea RCE Vulnerability CVE-2026-60004 Allows Repository Writers to Execute Shell Commands via Git Hooks
A critical remote code execution (RCE) vulnerability, tracked as CVE-2026-60004 with a CVSS score of 9.8, has been patched in Gitea, the…
Gitea Patches Critical RCE in Version 1.27.1
Gitea, a popular open-source Git hosting platform, released version 1.27.1 to address CVE-2026-60004, a critical remote code execution vulnerability. The flaw could…
Gitea Cloud: Managed Gitea Hosting
Gitea Cloud provides managed hosting for Gitea instances, offering automatic updates and maintenance. It is a service by Gitea for users who…
Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure
Threat actors have been observed attempting to exploit a recently patched critical security flaw in Gitea Docker images, according to Sysdig. The…
Gitea Docker Images Patched for Critical Authentication Bypass
Gitea Docker images versions before 1.26.3 are vulnerable to CVE-2026-20896, which allows unauthenticated access via a trusted reverse proxy header. The fix…
Gitea — Cybersecurity company profile
Gitea was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…