CloudThe Hacker Newsabout 2 hours ago
Gitea Docker Flaw Exploited 13 Days After Disclosure
1 min read
Threat actors are probing CVE-2026-20896, a critical Gitea Docker flaw with a CVSS score of 9.8. The vulnerability allows unauthenticated clients to gain elevated access via a trusted X-WEBAUTH-USER header. Sysdig detected the first exploitation attempt 13 days after disclosure. The flaw affects versions before 1.26.3.
Level
Hype check
Tap to vote and see what everyone thinks.
