Gitea Vulnerability Exposes Private Container Images without Authentication

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-05-27 10:06 UTC
Importiert: 2026-06-04 14:37 UTC
Quelle-ID: thn_global
uid_hash: 338e29837536350f4edd0c1a27a1bad8b7859e90eb2741693b32529cc1e663e2

The Hacker News

Inhalt

Cybersecurity researchers have disclosed a security flaw in Gitea, an open-source, self-hosted platform for version control, that allows unauthenticated remote attackers to pull private container images from Gitea deployments without requiring an account, password, or other credentials.

The vulnerability, tracked as CVE-2026-27771 (CVSS score: 8.2), affects all versions of Gitea prior to 1.26.2

Verknuepfte CVEs

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2026-27771			HIGH	8.2			2026-07-03

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
The Hacker News	thn_global	security_news		-	de	https://feeds.feedburner.com/TheHackersNews

Zurueck zur Eintrags-Liste