CRITICALVulnerability
Global

Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload

·Source: The Hacker News

Updated:

Executive Summary

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation efforts targeting a recently patched critical security flaw impacting Gitea. The vulnerability in question is CVE-2026-60004 (CVSS score: 9.8), a case of remote code execution that allows an attacker with ordinary write access to a repository to execute arbitrary shell commands as the

Analysis

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation efforts targeting a recently patched critical security flaw impacting Gitea. The vulnerability in question is CVE-2026-60004 (CVSS score: 9.8), a case of remote code execution that allows an attacker with ordinary write access to a repository to execute arbitrary shell commands as the

Indicators of Compromise (1)

CVE (1)
CVE-2026-60004
NVDMITRE CVE
Source Attribution

Originally published by The Hacker News on Aug 26, 2026.

Related Threats

MEDIUMVulnerabilityNEW

Taurus enables financial institutions to connect to Swift's blockchain-based shared ledger

Taurus, a leader in digital asset infrastructure, is enabling financial institutions to connect to Swift’s blockchain-based shared ledger, with the first live clients expected in a couple of days.

Finextra
MEDIUMVulnerabilityNEW

Abound chooses Monad for blockchain-based growth plan

Abound, the super-app for Indians in the US backed by Times Internet (Times of India Group), grew past $500 Million in remittance volumes served in the last year, with US and India markets accounting for the bulk of volumes.

Finextra
MEDIUMVulnerabilityNEW

Average Cyber Insurance Losses Increase Despite Fewer Claims

Chubb reported that growing privacy litigation has contributed to surging cyber claim costs in the US

Infosecurity Magazine