SecurityBleepingComputerabout 1 hour ago
8,300 Gitea servers exposed to code execution attacks
1 min read
Over 8,300 internet-exposed Gitea servers remain unpatched against CVE-2026-60004, a critical code injection flaw exploited in ongoing attacks. The vulnerability allows authenticated attackers to execute shell commands via the diffpatch API. Gitea released version 1.27.1 on July 27 to address it, and CISA ordered federal agencies to patch by August 28.
Level
Hype check
Tap to vote and see what everyone thinks.
