Gitea

A Chinese threat actor identified as Red Heron has been linked to the swift exploitation of a recently disclosed remote code execution (RCE) vulnerability within the Gitea software. This exploitation formed the basis of a multi-national campaign that successfully compromised…

Over 8,300 Gitea instances exposed to the internet are still vulnerable to a critical security flaw that enables remote code execution, according to a report by cybersecurity watchdog Shadowserver. This vulnerability, identified as CVE-2023-5892, allows attackers to execute arbitrary code…

Attackers are actively exploiting a critical-severity vulnerability within the Gitea self-hosted Git service, enabling them to execute code injection attacks and gain unauthorized access to systems. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a warning on May 21…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a warning on Tuesday regarding the active exploitation of a critical security vulnerability within the Gitea software. This vulnerability, identified as CVE-2026-60004, carries a high CVSS score of 9.8, indicating…

A critical security vulnerability, tracked as CVE-2026-59774, has been identified in the self-hosted Git platform Gitea, affecting versions 1.22.1 through 1.27.0. This flaw permits unauthenticated attackers to read any file accessible by the Gitea service account on the server.

Gitea, the popular self-hosted Git platform, has addressed a critical remote code execution (RCE) vulnerability that allowed users with ordinary repository write access to execute arbitrary shell commands on the server.

Hackers are actively exploiting a critical authentication bypass vulnerability within the official Docker image for Gitea, a popular self-hosted Git service. This flaw, identified as CVE-2024-27974, enables attackers to impersonate any user on a vulnerable instance, including administrators, without requiring…