PT-2026-65725 · Undefined · Undefined

CVE-2026-60004 · Publicado 2026-07-29 · Atualizado 2026-07-29

Telegram · Thehackernews

🚨 New Gitea RCE (CVE-2026-60004) lets repository writers plant a malicious Git hook and run shell commands as the Gitea service account.

On default-configured instances, outsiders can register, create a repository, and obtain the required write access.

A public PoC is available.

Find details here: https://thehackernews.com/2026/07/new-gitea-rce-lets-repository-writers.html

Identificadores relacionados

CVE-2026-60004

Produtos afetados

Undefined

Referências · 1

• https://t.me/thehackernews/9644 · Publicação no Telegram