SecurityBleepingComputerabout 1 hour ago
Gitea flaw exploited in code injection attacks
1 min read
Attackers are actively exploiting critical Gitea flaw CVE-2026-60004, a code injection vulnerability allowing arbitrary shell commands via the diffpatch API. Gitea released version 1.27.1 on July 27 to fix it. CISA added the flaw to its KEV catalog and ordered U.S. agencies to patch within three days.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
