Hackers now exploit critical Gitea flaw in code injection attacks

BleepingComputer by Sergiu Gatlan 26 August 2026, 14:07 EEST Security

Attackers are now exploiting a critical-severity vulnerability in the Gitea self-hosted Git service, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA).

Read the full story on BleepingComputer https://www.bleepingcomputer.com/news/security/hackers-now-exploit-critical-gitea-flaw-in-code-injection-attacks/

Attacks like this land on ordinary sites far more often than on chosen targets. If you would rather your site never became the story, CrockyHost hosting ships with daily backups, automatic updates and a firewall we manage.

Keep reading

Claude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users' Reservations in Tests The Hacker News
Newly SLEEPWALKER Backdoor Waits for One Crafted Packet, Then Runs Its Own Bytecode The Hacker News
Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload The Hacker News
Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes The Hacker News