As cited
Copy frozen at (site build).
vulnerabilities
CISA Warns of Exploited Gitea Vulnerability
No summary had been written when this copy was frozen.
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CISA Warns of Exploited Gitea Vulnerability
Gitea developers patched CVE-2026-60004, a remote code execution (RCE) vulnerability, in version 1.27.1 released in late July. The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding active exploitation of this flaw.
Why it matters: Organizations running Gitea must upgrade to version 1.27.1 or later immediately, as this RCE vulnerability is being actively exploited in the wild.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CISA Warns of Exploited Gitea Vulnerability
Gitea developers patched CVE-2026-60004, a remote code execution (RCE) vulnerability, in version 1.27.1 released in late July. The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding active exploitation of this flaw.
Why it matters: Organizations running Gitea must upgrade to version 1.27.1 or later immediately, as this RCE vulnerability is being actively exploited in the wild.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CISA Warns of Exploited Gitea Vulnerability
CVE-2026-60004 is a remote code execution (RCE) vulnerability in Gitea that received a patch in version 1.27.1 in late July, 2026. CISA has warned that the vulnerability is actively exploited in the wild.
Why it matters: Organizations running Gitea instances must upgrade immediately to version 1.27.1 or later to prevent RCE attacks, as exploitation is confirmed and ongoing.
- Source published
- First seen by Cybersecurity Tracker