Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-08-26 06:27 UTC
  • Importiert: 2026-09-01 17:54 UTC
  • CVSS: 9.8
  • Quelle-ID: thn_global
  • uid_hash: d6c8c6681e2911d7f6720ee37ee2b081dd795d95b5c084537848cbebab989590

Inhalt

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation efforts targeting a recently patched critical security flaw impacting Gitea.

The vulnerability in question is CVE-2026-60004 (CVSS score: 9.8), a case of remote code execution that allows an attacker with ordinary write access to a repository to execute arbitrary shell commands as the

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-60004

CRITICAL

9.8

CRITICAL

9.8

2026-08-26

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews