NewsThe Hacker NewsSMEPublic sector

    Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload

    Share
    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation efforts targeting a recently patched critical security flaw impacting Gitea. The vulnerability in question is CVE-2026-60004 (CVSS score: 9.8), a case of remote code execution that allows an attacker with ordinary write access to a repository to execute arbitrary shell commands as the

    Linked advisories

    Affected vendors and products

    Source: https://thehackernews.com/2026/08/critical-gitea-rce-actively-exploited.html

    ID