CVE-2026-60004

notes

CISA Warns of Exploited Gitea Vulnerability

1. Executive summary CISA reports active exploitation of CVE-2026-60004, a Gitea code-injection vulnerability that converts attacker-controlled patch content into an executable Git

26 Aug 2026 · 6 min read read →

notes

Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload

1. Executive summary CVE-2026-60004 affects Gitea 1.17 through 1.27.0 and enables a repository writer to plant an executable Git hook through

26 Aug 2026 · 6 min read read →

notes

CVE-2026-60004 — Gitea Gitea: Gitea Code Injection Vulnerability

1. Executive summary CVE-2026-60004 is a reported Gitea code-injection vulnerability through which a user with repository write access can submit a malicious patch

25 Aug 2026 · 5 min read read →