Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload

The Hacker News 26 August 2026, 09:27 EEST Security

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation efforts targeting a recently patched critical security flaw impacting Gitea. The vulnerability in question is CVE-2026-60004 (CVSS score: 9.8), a case of remote code execution that allows an attacker with ordinary write access to a repository to execute arbitrary shell commands as the…

Read the full story on The Hacker News https://thehackernews.com/2026/08/critical-gitea-rce-actively-exploited.html

Attacks like this land on ordinary sites far more often than on chosen targets. If you would rather your site never became the story, CrockyHost hosting ships with daily backups, automatic updates and a firewall we manage.

Keep reading

Newly SLEEPWALKER Backdoor Waits for One Crafted Packet, Then Runs Its Own Bytecode The Hacker News
Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes The Hacker News
LACMA data breach last year exposed social security and medical data BleepingComputer
Hackers abuse npm mirrors to host phishing redirect pages BleepingComputer