Rilevato sfruttamento di vulnerabilità in Gitea

CVE v události 1

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE.

Jak se o tom psalo 4

1. 26. 8. 2026 14:39 · CSIRT Itálie (ACN) IT nadpis události

   Rilevato sfruttamento di vulnerabilità in Gitea

   Rilevato lo sfruttamento attivo in rete di una vulnerabilità con gravità “critica” - già sanata dal vendor - relativa a Gitea, piattaforma collaborativa open source per la gestione del codice sorgente e lo sviluppo di applicazioni software.

2. 25. 8. 2026 20:29 · Cyber Centre Kanada CA

   Gitea security advisory (AV26-845)

   Serial Number: AV26-845Date: August 25, 2026 As of August 14, 2026, Gitea is affected by vulnerabilities in the following product: Gitea Prior to 1.27.1 On August 25, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-60004 to their Known Exploited Vulnerabilities (KEV) Database. The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Remote Code Execution via diffpatch Git Hook…

3. 25. 8. 2026 · zachyceno 21:00 · CISA Advisories US

   CISA Adds One Known Exploited Vulnerability to Catalog

   CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-60004 Gitea Code Injection Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch …

4. 25. 8. 2026 · zachyceno 19:30 · CISA KEV US

   Gitea Code Injection Vulnerability (CVE-2026-60004)

   CISA added CVE-2026-60004 to the Known Exploited Vulnerabilities catalog. Affected product: Gitea Gitea. Remediation due date: 2026-08-28.