Over 8,300 Gitea servers vulnerable to code execution attacks
Teaser from the source
Over 8,300 Internet-exposed Gitea instances are still unpatched against a critical security flaw exploited in ongoing remote code execution attacks, according to cybersecurity watchdog Shadowserver. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on execution
Other advisories
- HighCVE-2026-61438PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox
- CriticalCVE-2026-86471Apache CouchDB: Admin credentials leading to code execution as operating system user
- Not ratedosv:CVE-2026-54453OpenCATS: Authenticated Remote Code Execution via SettingsUI (manageProfessional)
- Not ratedosv:CVE-2026-61567AVideo-Encoder: unauthenticated command execution through streamer login trust
- Not ratedosv:CVE-2026-118683MONAI 1.2.0 before 1.6.1 Code Execution via bundle configs/logging.conf
- Not ratedosv:CVE-2026-118647n8n before 1.123.85, 2.43.5, and 2.44.1 SeaTable Trigger API Token Exposure via Execution Data
- Not ratedosv:CVE-2026-118643n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Exposure via Node Execution Error Data
- Not ratedosv:CVE-2026-116778FOG: Authenticated low-privileged API user can modify Storage Nodes and reach root command execution
Other news entries
- Adobe, Veeam, Juniper Networks Patch Critical VulnerabilitiesNewsSecurityWeek
- Trusting Unsloth’s trust setting could mean executing malicious codeNewsCSO Online
- Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security BypassNewsThe Hacker News
- Hackers Start Probing Fresh Oracle EBS VulnerabilityNewsSecurityWeek
- Code-execution flaw in UEFI firmware affects most servers on planet EarthNewsArs Technica — Security
- HPE Patches Dozens of Critical Flaws in Networking ProductsNewsSecurityWeek
- CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code ExecutionNewsThe Hacker News
- PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution FlawNewsThe Hacker News
ID