As cited
Copy frozen at (site build).
vulnerabilities
Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload
No summary had been written when this copy was frozen.
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned on August 26, 2026 of active attacks exploiting CVE-2026-60004, a critical remote code execution (RCE) flaw in Gitea with a CVSS score of 9.8. The vulnerability permits attackers with repository write access to execute arbitrary shell commands, and confirmed attacks have deployed miner-like payloads.
Why it matters: Organizations running Gitea instances are under active attack and must patch immediately; repository contributors with write access present an initial attack surface.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned on August 26, 2026 of active attacks exploiting CVE-2026-60004, a critical remote code execution (RCE) flaw in Gitea with a CVSS score of 9.8. The vulnerability permits attackers with repository write access to execute arbitrary shell commands, and confirmed attacks have deployed miner-like payloads.
Why it matters: Organizations running Gitea instances are under active attack and must patch immediately; repository contributors with write access present an initial attack surface.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload
The Cybersecurity and Infrastructure Security Agency (CISA) warned on August 26, 2026, that CVE-2026-60004, a critical remote code execution (RCE) flaw in Gitea, was under active exploitation. The vulnerability, rated 9.8 on the CVSS scale, allows attackers with repository write access to execute arbitrary shell commands.
Why it matters: Gitea users must immediately apply available patches; the high CVSS score and active exploitation mean this is a priority remediation for any organization running Gitea in production.
- Source published
- First seen by Cybersecurity Tracker