Tag: Gitea

More than 8,300 Internet-exposed Gitea servers remain vulnerable to a critical code injection flaw that attackers are actively exploiting. Gitea code execution flaw affects exposed servers The vulnerability, tracked as CVE-2026-60004, allows attackers with repository write access to execute commands with the permissions of the Gitea service account. The issue affects Gitea’s diffpatch API endpoint. Attackers can…