Výsledky hledání

CVE: CVE-2026-60004× výrobce: Gitea× v celém archivu zrušit filtry

3 karet z 7 položek CZ · EN/orig

Hvězdička u CVE znamená, že jsem to číslo vytáhl z širšího textu článku. Neukazuju u něj proto KEV, EPSS ani CVSS, a to preventivně, protože článek se na něj mohl jen odkazovat, třeba jako na starší kauzu.

28. 8. 2026 14:58

SPOJENO PŘES CVE Over 8,300 Gitea servers vulnerable to code execution attacks

Over 8,300 Internet-exposed Gitea instances are still unpatched against a critical security flaw exploited in ongoing remote code execution attacks, according to cybersecurity watchdog Shadowserver. [...]

CVE-2026-20896 * CVE-2026-60004 * Gitea US

tg: incident tg: zneužíváno tp: malware

28. 8. 2026 14:58 · BleepingComputer · Over 8,300 Gitea servers vulnerable to code execution attacks

27. 8. 2026 · zachyceno 09:00

Gitea 1.27.1 is released security patch

Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8, CVEs: CVE-2026-59774, CVE-2026-60004, Summary: This release addresses the following security vulnerabilities. Please upgrade as soon as possible. CVE-2026-59774: Unauthenticated arbitrary file read via the Org-mode #+INCLUDE directive. Fixed by #38642 / #38645. Thanks to @xbow-security and, independently, @NightRang3r for reporting the issue, and to @wxiaoguang and @TheFox0x7 for the patch. CVE-2026…

KEV ✓ EPSS 0.28 CVSS 9.8 CVE-2026-59774 CVE-2026-60004 Gitea FI

27. 8. 2026 · zachyceno 09:00 · NCSC-FI · Gitea 1.27.1 is released security patch

26. 8. 2026 14:39

SPOJENO PŘES CVE Rilevato sfruttamento di vulnerabilità in Gitea

Rilevato lo sfruttamento attivo in rete di una vulnerabilità con gravità “critica” - già sanata dal vendor - relativa a Gitea, piattaforma collaborativa open source per la gestione del codice sorgente e lo sviluppo di applicazioni software.

KEV ✓ EPSS 0.24 CVE-2026-60004 Gitea veřejná správa IT CA US

26. 8. 2026 14:39 · CSIRT Itálie (ACN) · Rilevato sfruttamento di vulnerabilità in Gitea 25. 8. 2026 20:29 · Cyber Centre Kanada · Gitea security advisory (AV26-845) 25. 8. 2026 · zachyceno 21:00 · CISA Advisories · CISA Adds One Known Exploited Vulnerability to Catalog 25. 8. 2026 · zachyceno 19:30 · CISA KEV · Gitea Code Injection Vulnerability (CVE-2026-60004)