SecurityThe Hacker Newsabout 2 hours ago
Critical Gitea RCE Actively Exploited
1 min read
CISA warns of active exploitation of CVE-2026-60004, a critical Gitea remote code execution flaw with a 9.8 CVSS score. The vulnerability allows attackers with repository write access to execute shell commands via the diffpatch endpoint. A developer reported a cryptominer dropper attack on their Gitea instance.
Level
Hype check
Tap to vote and see what everyone thinks.
