Gitea Archives • Daily CyberSecurity

Gitea Fixes 27 Security Flaws Across 28.0.0 and 28.1.0, Including SSRF and Account Takeover Bugs

Gitea security update 28.0.0 and 28.1.0 fixes SSRF flaw CVE-2026-101027 installer takeover CVE-2026-96404 and SSH key bug CVE-2026-103059

Gitea Fixes 27 Security Flaws Across 28.0.0 and 28.1.0, Including SSRF and Account Takeover Bugs

Do Son October 7, 2026

A Gitea security update fixes 27 flaws, including SSRF bug CVE-2026-101027 and SSH key flaw CVE-2026-103059. Upgrade to Gitea 28.1.0 now.

Gitea RCE Vulnerability Exploited in the Wild Diagram of Gitea RCE vulnerability and Gitea RCE vulnerability exploited in attacks

Gitea RCE Vulnerability Exploited in the Wild

Do Son September 15, 2026

A critical Gitea RCE vulnerability exploited in wild attacks exposes servers. Patch this Gitea RCE vulnerability now to prevent full system compromise.

Gitea Vulnerability CVE-2026-59774 Enables Unauthenticated Remote Code Execution

Gitea vulnerability CVE-2026-59774 unauthenticated remote code execution arbitrary file read patch 1.27.1

Gitea Vulnerability CVE-2026-59774 Enables Unauthenticated Remote Code Execution

Do Son August 4, 2026

A critical Gitea vulnerability, CVE-2026-59774, lets unauthenticated attackers read server files and reach remote code execution. Update to 1.27.1 now.

Gitea RCE Flaw CVE-2026-60004 (CVSS 9.8): Details and PoC Exploit Publicly Disclosed Gitea RCE vulnerability CVE-2026-60004 via diffpatch Git hook installation rated CVSS 9.8

Gitea RCE vulnerability CVE-2026-60004 via diffpatch Git hook installation rated CVSS 9.8

Gitea RCE Flaw CVE-2026-60004 (CVSS 9.8): Details and PoC Exploit Publicly Disclosed

Do Son July 29, 2026

CVE-2026-60004 is a critical Gitea RCE via a diffpatch Git hook, rated CVSS 9.8. Full details and a public PoC are out. Update to Gitea 1.27.1 now.

CVE-2026-58443: Gitea Flaw (CVSS 9.6) Details and PoC Exploit Code Publicly Disclosed Gitea vulnerability CVE-2026-58443 public-only token writing to private repository

Gitea vulnerability CVE-2026-58443 public-only token writing to private repository

CVE-2026-58443: Gitea Flaw (CVSS 9.6) Details and PoC Exploit Code Publicly Disclosed

Do Son July 20, 2026

Gitea vulnerability CVE-2026-58443 (CVSS 9.6) lets public-only tokens write to private repos. Details and PoC code are public. Update to v1.27.0.

Critical Gitea Security Flaws Expose Servers to Takeover Diagram illustrating critical Gitea security flaws, CVE-2026-20896 and CVE-2026-22874

Diagram illustrating critical Gitea security flaws, CVE-2026-20896 and CVE-2026-22874

Critical Gitea Security Flaws Expose Servers to Takeover

Do Son June 25, 2026

Discover critical Gitea security flaws exposing servers to account takeovers and SSRF attacks. Read about CVE-2026-20896 and CVE-2026-22874 patches today.

JINX-0132: Cryptojackers Exploit Misconfigured DevOps Environments Cryptojacking, DevOps Security

JINX-0132: Cryptojackers Exploit Misconfigured DevOps Environments

Do Son June 3, 2025

Wiz uncovers JINX-0132, a cryptojacking campaign exploiting misconfigured Nomad, Consul, Docker, and Gitea in DevOps environments to mine Monero.