Výsledky hledání

SPOJENO PŘES CVE Over 8,300 Gitea servers vulnerable to code execution attacks

Over 8,300 Internet-exposed Gitea instances are still unpatched against a critical security flaw exploited in ongoing remote code execution attacks, according to cybersecurity watchdog Shadowserver. [...]

KEV ✓ EPSS 0.87 CVE-2026-20896 CVE-2026-60004 Gitea US

tg: incident tg: zneužíváno tp: malware

28. 8. 14:58 · BleepingComputer · Over 8,300 Gitea servers vulnerable to code execution attacks

Gitea 1.27.1 is released security patch

Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8, CVEs: CVE-2026-59774, CVE-2026-60004, Summary: This release addresses the following security vulnerabilities. Please upgrade as soon as possible. CVE-2026-59774: Unauthenticated arbitrary file read via the Org-mode #+INCLUDE directive. Fixed by #38642 / #38645. Thanks to @xbow-security and, independently, @NightRang3r for reporting the issue, and to @wxiaoguang and @TheFox0x7 for the patch. CVE-2026…

KEV ✓ EPSS 0.87 CVSS 9.8 CVE-2026-59774 CVE-2026-60004 Gitea FI

27. 8. 04:00 · NCSC-FI · Gitea 1.27.1 is released security patch

SPOJENO PŘES CVE Rilevato sfruttamento di vulnerabilità in Gitea

Rilevato lo sfruttamento attivo in rete di una vulnerabilità con gravità “critica” - già sanata dal vendor - relativa a Gitea, piattaforma collaborativa open source per la gestione del codice sorgente e lo sviluppo di applicazioni software.

KEV ✓ EPSS 0.87 CVE-2026-60004 Gitea veřejná správa IT CA US

26. 8. 14:39 · CSIRT Itálie (ACN) · Rilevato sfruttamento di vulnerabilità in Gitea 25. 8. 20:29 · Cyber Centre Kanada · Gitea security advisory (AV26-845) 25. 8. 14:00 · CISA Advisories · CISA Adds One Known Exploited Vulnerability to Catalog 25. 8. 02:00 · CISA KEV · Gitea Code Injection Vulnerability (CVE-2026-60004)