{"uuid": "ff54409e-5174-491b-9cac-b1d235d634e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://t.me/pphm_HackerNews/2869", "content": "\ud83d\udd34 Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation efforts targeting a recently patched critical security flaw impacting Gitea.\n\nThe vulnerability in question is CVE-2026-60004 (CVSS score: 9.8), a case of remote code execution that allows an attacker with ordinary write access to a repository to execute arbitrary shell commands as the Gitea OS user.", "creation_timestamp": "2026-08-26T16:00:04.382870Z"}