Cybersecurity Tracker: Gitea Watchhttps://cybersecuritytracker.ai/?stack=1Stories and vulnerabilities involving Gitea.Sun, 26 Jul 2026 22:32:52 GMTCritical Gitea Flaw Under Active Exploitation, Researchers Warnhttps://securityweek.com/critical-gitea-flaw-under-active-exploitation-researchers-warncst-545A critical vulnerability in Gitea (CVE-2026-20896) allows attackers to bypass authentication by manipulating a single HTTP header, granting access to repositories and secrets. Researchers have confirmed the flaw is under active exploitation in the wild.Tue, 07 Jul 2026 17:17:19 GMTThreat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosurehttps://thehackernews.com/2026/07/threat-actors-probe-gitea-docker-flaw.htmlcst-486Threat actors have begun probing a critical vulnerability in Gitea Docker images (CVE-2026-20896, CVSS 9.8) just 13 days after its disclosure. The flaw allows unauthenticated users to bypass authentication by spoofing the X-WEBAUTH-USER header, enabling elevated privilege access to the DevOps platform.Mon, 06 Jul 2026 16:28:59 GMT