NewsThe Hacker News
Gitea Vulnerability Exposes Private Container Images without Authentication
Affected vendors and products
More on Authentication
Other advisories
- Not ratedosv:CLEANSTART-2026-UC16830In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes
- MediumCVE-2026-116684Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server
- MediumCVE-2026-116684Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server
- Not ratedosv:CVE-2026-116684Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server
- Not ratedosv:GHSA-h2v8-394m-p7vvRustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB before authentication.
- Lowghsa:GHSA-h2v8-394m-p7vvRustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB before authentication.
- Not ratedosv:CVE-2026-117564nest-admin before 1.0.1 Authentication Bypass via Hardcoded JWT Secret
- Not ratedosv:CVE-2026-117532REDAXO Core 5.3.0 before 5.21.4 Authentication Bypass via History Plugin
Other news entries
- HPE Patches Dozens of Critical Flaws in Networking ProductsNewsSecurityWeek
- Malicious downloads can trick AI coding agents into compromising themselvesNewsCSO Online
- Dual BIOS: The laptop security feature SMBs don’t know they needNewsCSO Online
- HPE patches eight max severity RCE and auth bypass AOS flawsNewsBleepingComputer
- Cisco Patches 34 Vulnerabilities Across Multiple ProductsNewsSecurityWeek
- Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFANewsThe Hacker News
- CJIS v6.1 Compliance: 5 Practical Priorities for AgenciesNewsBleepingComputer
- Ivanti ICS Zero-Day Attacks Highlight Vendor Patching HurdlesNewsDark Reading
Source: https://thehackernews.com/2026/05/gitea-vulnerability-exposes-private.html
ID