{"vulnerability": "CVE-2026-60004", "sightings": [{"uuid": "91789089-6e38-4654-b779-0f0aec1275ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://t.me/GithubRedTeam/95817", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a EQSTLab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-30 08:22:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGitea diffpatch RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-30T10:00:02.247468Z"}, {"uuid": "f4d29bfb-66dc-49c5-b897-d5a5956ef288", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://t.me/cyberwarehouse/1175", "content": "\ud83d\udea8 New Gitea RCE (CVE-2026-60004) lets repository writers plant a malicious Git hook and run shell commands as the Gitea service account.\n\nOn default-configured instances, outsiders can register, create a repository, and obtain the required write access.\n\nA public PoC is available.\n\nFind details here: https://thehackernews.com/2026/07/new-gitea-rce-lets-repository-writers.html", "creation_timestamp": "2026-07-30T10:00:02.386115Z"}, {"uuid": "b1bfd8af-894f-4927-8b83-6b675ecfd7e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://thehackernews.com/2026/07/new-gitea-rce-lets-repository-writers.html", "content": "Gitea, the self-hosted Git platform, has patched a critical remote code execution vulnerability. A user with ordinary repository write access can turn attacker-controlled patch content into a live Git hook and run shell commands as the Gitea service account.\n\nTracked as CVE-2026-60004 (CVSS score: 9.8), the flaw affects Gitea versions 1.17 and later before 1.27.1 and is fixed in 1.27.1. The", "creation_timestamp": "2026-07-30T01:00:43.682929Z"}, {"uuid": "438d7814-8e8d-4a9a-a090-4d1fc3e51560", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/y-21MzKnE9UtyaE5ab_pL94fhj_dfFdxSXCYpnNpKZOg4AI", "content": "", "creation_timestamp": "2026-07-30T14:00:04.601753Z"}, {"uuid": "ab5bcced-4e44-46b2-bcf2-3637d4d1b9f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/4UmGIQtfBl8KQZeNab7MkdV3KJBv_MFiZ_bvWr3ttjSdt98", "content": "", "creation_timestamp": "2026-07-30T19:00:04.297923Z"}, {"uuid": "7e5db307-1d1d-4faa-b80b-b7a9742cc5cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/R-K8yexL9h9FqCu7kuwBiYvy86poGzTHuRy3PTR8RVZt5C0", "content": "", "creation_timestamp": "2026-08-04T17:00:04.477047Z"}, {"uuid": "b4d5a74f-9776-4409-8aae-b560dad3cf9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/LqdU20CE0Hk-SL_FPOS2WnuOEvVMOSrUkoEKMOvVibc5ya4", "content": "", "creation_timestamp": "2026-08-04T17:00:04.703972Z"}, {"uuid": "823ac9a2-302b-4bcc-bb24-cb3d1eb36a21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96399", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a imbas007\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-03 07:59:42\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-03T10:31:25.365110Z"}, {"uuid": "d2ef21a5-18da-4b54-8869-bd3b972e0aa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/y-21MzKnE9UtyaE5ab_pL94fhj_dfFdxSXCYpnNpKZOg4AI", "content": "", "creation_timestamp": "2026-07-31T00:00:29.746750Z"}, {"uuid": "3a415038-f879-4a43-8bd3-5a21044aea5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/1175", "content": "\ud83d\udea8 New Gitea RCE (CVE-2026-60004) lets repository writers plant a malicious Git hook and run shell commands as the Gitea service account.\n\nOn default-configured instances, outsiders can register, create a repository, and obtain the required write access.\n\nA public PoC is available.\n\nFind details here: https://thehackernews.com/2026/07/new-gitea-rce-lets-repository-writers.html", "creation_timestamp": "2026-07-31T00:00:34.744565Z"}, {"uuid": "c4c8bdfa-672f-4ed2-beed-42b666f9c94a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95817", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a EQSTLab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-30 08:22:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGitea diffpatch RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-31T00:00:34.885201Z"}, {"uuid": "573ecc30-8d2b-4d9e-a14e-cdaab5178ee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/FFZlII9he5d1Fuscjf7MrqE5pZIDGxpq32yulECS4VZGDw", "content": "", "creation_timestamp": "2026-07-31T00:00:45.031456Z"}, {"uuid": "445d5d3e-daef-478a-8822-b16c64e692c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/4UmGIQtfBl8KQZeNab7MkdV3KJBv_MFiZ_bvWr3ttjSdt98", "content": "", "creation_timestamp": "2026-07-31T01:00:09.816493Z"}, {"uuid": "60afe3f9-b543-47c4-ab61-c5121b0fff8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/-yvSoR82NqkZYRFAJ0RPwns7oo0m2sVtQANb6s2__TWozPg", "content": "", "creation_timestamp": "2026-07-31T03:00:03.304043Z"}, {"uuid": "de30d584-68e7-4202-973b-673218e3c34c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/SpHcF5o5W-zb5RnmDP-EoqwVpXHZEobhM5Z8fIn-sbJxq28", "content": "", "creation_timestamp": "2026-07-31T08:00:03.795818Z"}, {"uuid": "d4a5e6e7-6f5a-4c86-b3ce-443996a4d35e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/_3dDvw2gBKTVqJg_qD4Cxi_GWBZe501hrVnApmxGIoGryvk", "content": "", "creation_timestamp": "2026-08-03T13:23:49.445336Z"}, {"uuid": "04d49d60-e105-435c-bc90-d7da51999eb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96433", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-03 12:49:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-60004 \u2014 Gitea/Forgejo Diffpatch Git Hook RCE. Bare clone \u2192 post-index-change hook injection. CVSS 9.8 | CWE-94 | Gitea < 1.27.1\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-03T14:00:04.777086Z"}, {"uuid": "c1bf0cf3-50bf-44a3-9e00-6013f74363b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-60004.yaml", "content": "", "creation_timestamp": "2026-08-03T15:00:03.529283Z"}, {"uuid": "d7c864e2-35dd-4824-8a1d-e1d04d56b169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/R-K8yexL9h9FqCu7kuwBiYvy86poGzTHuRy3PTR8RVZt5C0", "content": "", "creation_timestamp": "2026-08-05T00:00:26.161423Z"}, {"uuid": "85bd6c02-0f54-49ea-91fe-ad80ff3d2b25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/LqdU20CE0Hk-SL_FPOS2WnuOEvVMOSrUkoEKMOvVibc5ya4", "content": "", "creation_timestamp": "2026-08-05T00:00:26.390322Z"}, {"uuid": "7dc3ed2e-b106-4cd1-9314-fe315099d74d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/fRn9WLRC1KE6ry6fn3owOvcDc4IpJXFhnXNgjnu-Gc8v93I", "content": "", "creation_timestamp": "2026-08-03T16:00:05.178685Z"}, {"uuid": "82b0d78a-db3d-443c-867b-c9d8ce830bf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/UBJmie2uo-nhNRmzuL-Rvz_YulwxG1KXQPPCce6f2SyQJL0", "content": "", "creation_timestamp": "2026-08-03T16:00:05.685180Z"}, {"uuid": "a00b2038-cd1b-4e4d-9cbc-b1e638c1f2b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-60004.yaml", "content": "", "creation_timestamp": "2026-08-05T00:00:05.651986Z"}, {"uuid": "cbfab159-9b3b-4b6c-906f-502e15eee236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/SpHcF5o5W-zb5RnmDP-EoqwVpXHZEobhM5Z8fIn-sbJxq28", "content": "", "creation_timestamp": "2026-08-01T00:00:36.568523Z"}, {"uuid": "2a6f8e63-0170-42c0-9643-4086fbed791a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/-yvSoR82NqkZYRFAJ0RPwns7oo0m2sVtQANb6s2__TWozPg", "content": "", "creation_timestamp": "2026-08-01T00:00:43.051167Z"}, {"uuid": "f3ce710d-3637-4af4-a090-01f288eec60f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-60004.yaml", "content": "", "creation_timestamp": "2026-08-04T00:00:05.535211Z"}, {"uuid": "27f55b3c-862d-4bd5-9365-3fd0827b4a5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96433", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-03 12:49:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-60004 \u2014 Gitea/Forgejo Diffpatch Git Hook RCE. Bare clone \u2192 post-index-change hook injection. CVSS 9.8 | CWE-94 | Gitea < 1.27.1\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-04T00:00:37.633972Z"}, {"uuid": "95bb8eae-00be-4cb6-9047-46d84b20e2cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/fRn9WLRC1KE6ry6fn3owOvcDc4IpJXFhnXNgjnu-Gc8v93I", "content": "", "creation_timestamp": "2026-08-04T00:00:33.432808Z"}, {"uuid": "44ad98ab-bc43-41eb-bf6f-8c0b3e2969a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/UBJmie2uo-nhNRmzuL-Rvz_YulwxG1KXQPPCce6f2SyQJL0", "content": "", "creation_timestamp": "2026-08-04T00:00:33.926272Z"}, {"uuid": "0e3108e8-8406-4f88-9c8d-89509fe6171e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/_3dDvw2gBKTVqJg_qD4Cxi_GWBZe501hrVnApmxGIoGryvk", "content": "", "creation_timestamp": "2026-08-04T00:00:41.025955Z"}, {"uuid": "a735758e-6caf-4afd-a872-4540e8dd89d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96399", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a imbas007\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-03 07:59:42\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-04T00:00:43.455635Z"}, {"uuid": "0f184283-da14-46b1-b45f-728c6c71a140", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96662", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004-gitea-0day\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Sachinart\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 22:54:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-60004 \u2014 Gitea <= 1.27.0 Pre-Auth RCE \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-05T00:00:08.982185Z"}, {"uuid": "87c25d46-4581-4e3f-8241-8b614f0ab8a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://t.me/GithubRedTeam/96596", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HackSpeak\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 12:32:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGitea diffpatch RCE (CVE-2026-60004) PoC - repo-write to RCE as Gitea service account\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-04T14:00:05.949935Z"}, {"uuid": "6c1a7483-a83e-44e5-967c-2d4a7819c6ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96596", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HackSpeak\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 12:32:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGitea diffpatch RCE (CVE-2026-60004) PoC - repo-write to RCE as Gitea service account\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-05T00:00:28.500887Z"}, {"uuid": "79ecd110-e2f4-4a2a-9909-1963b4505b54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/8aloBXQPHHfouGKf0EgG60bQLDnPnRmnq1pCP7sMVPUrMUc", "content": "", "creation_timestamp": "2026-08-05T05:00:10.111220Z"}, {"uuid": "06c2ea82-255d-49b1-bf55-b89f52def308", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97181", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004-poc-gitea\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a gagaltotal\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-08 13:08:39\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-60004 \u2014 Gitea Pre-Auth RCE via diffpatch hook injection\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-08T15:00:03.424874Z"}, {"uuid": "745a6bdc-8998-46bc-be25-09c003d2b546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/8Dh3YUE7Kfb7FvNcXIDSqcPSChtli_9yVwlxO3uxT68v6BA", "content": "", "creation_timestamp": "2026-08-08T23:24:01.095042Z"}, {"uuid": "1e18c350-865a-4422-a483-202e27b20ba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/8Dh3YUE7Kfb7FvNcXIDSqcPSChtli_9yVwlxO3uxT68v6BA", "content": "", "creation_timestamp": "2026-08-09T00:40:12.441728Z"}, {"uuid": "4514d4b0-848a-4d52-94cc-a2eef7e77a84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97181", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004-poc-gitea\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a gagaltotal\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-08 13:08:39\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-60004 \u2014 Gitea Pre-Auth RCE via diffpatch hook injection\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-09T00:46:43.170938Z"}, {"uuid": "aac22ff1-1cf2-49a4-9282-4c904877854f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://t.me/pphm_HackerNews/2376", "content": "\ud83d\udd34 New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands\n\nGitea, the self-hosted Git platform, has patched a critical remote code execution vulnerability. A user with ordinary repository write access can turn attacker-controlled patch content into a live Git hook and run shell commands as the Gitea service account.\n\nTracked as CVE-2026-60004 (CVSS score: 9.8), the flaw affects Gitea versions 1.17 and later before 1.27.1 and is fixed in 1.27.1. The vulnerable API call requires authentication and repository write permission. But Gitea enables registration by default, so an outside visitor can create a normal account and repository on an unchanged installation, then exploit the bug without pre-existing credentials.", "creation_timestamp": "2026-08-21T23:00:07.455430Z"}, {"uuid": "39a69246-eefc-4709-a914-6b724e23af85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/wffTTuVgQJ98JwhL42Ct7GiTcbOZOW8KxITp_kb-2yHdqmI", "content": "", "creation_timestamp": "2026-08-21T09:00:04.565162Z"}, {"uuid": "ca619ac9-d709-4a06-9055-7e22737c5ced", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/_vir8PHcFXMNY3qmJBX6iWTyJzWWGg928tieDwqp2_1Bjyo", "content": "", "creation_timestamp": "2026-08-09T05:11:07.929653Z"}, {"uuid": "ba3a7038-92cf-4d1a-a16d-5a29d13988d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-60004.yaml", "content": "", "creation_timestamp": "2026-08-06T00:00:06.835783Z"}, {"uuid": "57d81313-9152-4479-a254-a3a9b38e9b18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/8aloBXQPHHfouGKf0EgG60bQLDnPnRmnq1pCP7sMVPUrMUc", "content": "", "creation_timestamp": "2026-08-06T00:00:48.376373Z"}, {"uuid": "79698137-2da5-4569-86d5-6ab436b553a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/_vir8PHcFXMNY3qmJBX6iWTyJzWWGg928tieDwqp2_1Bjyo", "content": "", "creation_timestamp": "2026-08-10T00:00:09.519144Z"}, {"uuid": "c2e83d3b-dec2-4b15-9307-d036faa0aace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://t.me/pphm_HackerNews/2376", "content": "\ud83d\udd34 New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands\n\nGitea, the self-hosted Git platform, has patched a critical remote code execution vulnerability. A user with ordinary repository write access can turn attacker-controlled patch content into a live Git hook and run shell commands as the Gitea service account.\n\nTracked as CVE-2026-60004 (CVSS score: 9.8), the flaw affects Gitea versions 1.17 and later before 1.27.1 and is fixed in 1.27.1. The vulnerable API call requires authentication and repository write permission. But Gitea enables registration by default, so an outside visitor can create a normal account and repository on an unchanged installation, then exploit the bug without pre-existing credentials.", "creation_timestamp": "2026-08-22T00:00:11.032996Z"}, {"uuid": "97d2d7ee-09d4-4907-8963-6c269bcac33b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/wffTTuVgQJ98JwhL42Ct7GiTcbOZOW8KxITp_kb-2yHdqmI", "content": "", "creation_timestamp": "2026-08-22T00:00:28.600786Z"}, {"uuid": "f842909c-7cd6-4534-a373-242ea493264e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/geeknewsbot.bsky.social/post/3msxp6c47or2b", "content": "\ud648\ub7a9 \ud574\ud0b9 \uc0ac\uace0 \uc0ac\ud6c4 \ubd84\uc11d\n\n\uacf5\uac1c \uac00\uc785\uc774 \uc5f4\ub9b0 \ucc44 \uc9c0\uc6d0 \uc885\ub8cc\ub41c Forgejo v13 \uc744 \uc6b4\uc601\ud55c \ud648\ub7a9\uc774 CVE-2026-60004 \uc6d0\uaca9 \ucf54\ub4dc \uc2e4\ud589 \ucde8\uc57d\uc810\uc73c\ub85c \uce68\ud574\ub3fc \uc57d 24\uc2dc\uac04 \ub3d9\uc548 \uc554\ud638\ud654\ud3d0 \ucc44\uad74\uae30\ub97c \uc2e4\ud589\ud568 \uacf5\uaca9\uc790\ub294 \uacc4\uc815\uacfc \uc800\uc7a5\uc18c\ub97c \ub9cc\ub4e0 \ub4a4 diffpatch \uc5d4\ub4dc\ud3ec\uc778\ud2b8\uc5d0\uc11c \uc545\uc131 Git \ud6c5\uc744 \uc2e4\ud589\ud588\uc73c\uba70, \uacf5\uac1c\ub41c Nu...", "creation_timestamp": "2026-08-13T13:00:07.897986Z"}, {"uuid": "058eeeaa-d9e1-4064-8554-09af19b3b066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-60004.yaml", "content": "", "creation_timestamp": "2026-08-07T00:00:10.562035Z"}, {"uuid": "dbc31f1a-9daf-416b-a8ff-300ccabc787f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mtyefw6p3u2y", "content": "CISA says CVE-2026-60004 is actively exploited in Gitea, letting authenticated users run shell commands via the diffpatch API. Open registration can expose default installs. #Gitea #CISA #CodeInjection", "creation_timestamp": "2026-08-26T12:45:25.010643Z"}, {"uuid": "840f9f34-fa89-4898-a402-f9fe84c5a5e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://t.me/HackerNewscyber/3371", "content": "\u2708\ufe0f  \u0647\u0634\u062f\u0627\u0631 CISA \u062f\u0631\u0628\u0627\u0631\u0647 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0641\u0639\u0627\u0644 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u062f\u0631 Gitea\n\n\ud83c\udfa4\u0622\u0698\u0627\u0646\u0633 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0648 \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a \u0622\u0645\u0631\u06cc\u06a9\u0627 (CISA) \u0646\u0633\u0628\u062a \u0628\u0647 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0641\u0639\u0627\u0644 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2026-60004 \u062f\u0631 \u067e\u0644\u062a\u0641\u0631\u0645 \u0645\u062a\u0646\u200c\u0628\u0627\u0632 \u00ab\u06af\u06cc\u062a\u06cc\u0627\u00bb (Gitea) \u0647\u0634\u062f\u0627\u0631 \u062f\u0627\u062f.\n\n\ud83c\udfa5\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0632 \u0646\u0648\u0639 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u0633\u062a \u0648 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646\u06cc \u06a9\u0647 \u0628\u0647 \u06cc\u06a9 \u0645\u062e\u0632\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0646\u0648\u0634\u062a\u0646 \u062f\u0627\u0631\u0646\u062f\u060c \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0631\u0627\u0628\u0637 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0646\u0648\u06cc\u0633\u06cc diffpatch\u060c \u06a9\u062f\u0647\u0627\u06cc \u0645\u062e\u0631\u0628 \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u062f\u0631 \u0646\u0633\u062e\u0647 1.27.1 \u06af\u06cc\u062a\u06cc\u0627 \u0628\u0631\u0637\u0631\u0641 \u0634\u062f\u0647 \u0648 CISA \u0622\u0646 \u0631\u0627 \u0628\u0647 \u0641\u0647\u0631\u0633\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0634\u0646\u0627\u062e\u062a\u0647\u200c\u0634\u062f\u0647 \u0648 \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631\u06af\u0631\u0641\u062a\u0647 \u0627\u0636\u0627\u0641\u0647 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a.\n\n\u2708\ufe0f @HackerNewsCyber", "creation_timestamp": "2026-08-26T13:00:03.350570Z"}, {"uuid": "498a2b41-d891-41fa-91d2-7e5e49f7bbea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60004", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mtyfb6k5nk2q", "content": "\ud83d\udc1b VULNERABILITIES Critical Gitea vulnerability now exploited in the wild (CVE-2026-60004) \u2014 Help Net Security\nhttps://www.helpnetsecurity.com/2026/08/26/gitea-cve-2026-60004-exploited-in-the-wild/ #PatchManagement #Vulnerability #CVE", "creation_timestamp": "2026-08-26T13:00:38.966074Z"}, {"uuid": "3d0a70db-69b2-4240-b2a5-dce275c8f410", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60004", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117162038172183890", "content": "\ud83d\udcf0 CISA Warns of Actively Exploited Gitea RCE Flaw (CVE-2026-60004)\n\ud83d\udea8 CISA KEV ALERT: A critical RCE flaw in Gitea (CVE-2026-60004, CVSS 9.8) is actively exploited. Attackers can gain RCE on self-hosted Git servers. Patch to version 1.27.1 or later NOW. #Gitea #RCE #CISA #KEV #CVE202660004\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisa-warns-of-actively-exploited-gitea-rce-flaw-cve-2026-60004/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-26T13:27:20.337830Z"}, {"uuid": "9297caa5-d019-40ad-b5a9-afde210b41e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mtygrbfewf24", "content": "\ud83d\udea8 CISA KEV ALERT: A critical RCE flaw in Gitea (CVE-2026-60004, CVSS 9.8) is actively exploited. Attackers can gain RCE on self-hosted Git servers. Patch to version 1.27.1 or later NOW. #Gitea #RCE #CISA #KEV #CVE202660004\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-08-26T13:27:32.975098Z"}, {"uuid": "3b6ba592-d3db-41f3-8729-522d3d89502a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "exploited", "source": "https://t.me/information_security_channel/55803", "content": "CISA Warns of Exploited Gitea Vulnerability\nhttps://www.securityweek.com/cisa-warns-of-exploited-gitea-vulnerability/\n\nCVE-2026-60004 is a remote code execution vulnerability patched by Gitea developers in late July with the release of version 1.27.1.\nThe post CISA Warns of Exploited Gitea Vulnerability (https://www.securityweek.com/cisa-warns-of-exploited-gitea-vulnerability/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-08-26T14:00:05.691388Z"}, {"uuid": "c35fb9c8-b08f-4053-81b5-c2f3c9f4c8fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60004", "type": "seen", "source": "https://bsky.app/profile/etairos-ai.bsky.social/post/3mtyiuyssdi2j", "content": "Gitea RCE under active exploitation: CVE-2026-60004 turns a signup form into shell access.\nSelf-hosted Gitea often sits next to build and OT networks. Patch now.\n#ThreatIntel #ICS #CyberSecurity\nhttps://threat-intelligence.redeyesecurity.com/blog/gitea-diffpatch-rce-cve-2026-60004-exploited-2026", "creation_timestamp": "2026-08-26T14:05:26.017243Z"}, {"uuid": "b91c8970-1b03-4907-92a7-bf555779d826", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mtwfh7uz7m2s", "content": "\ud83d\uded1 CVE-2026-60004\nGitea Gitea\nKEV \u2705\nTL;DR: Gitea contains a code injection vulnerability that allows an attacker with repository write access to send a malicious\u2026\nhttps://cvesentinel.com/report/CVE-2026-60004?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-08-25T17:58:42.128307Z"}, {"uuid": "a07a81f1-92e2-4eda-9fca-7c22045ac1e9", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/96eebf87-b02d-4cdd-9c7f-6c5d0c932c3e", "content": "", "creation_timestamp": "2026-08-25T18:00:02.534858Z"}, {"uuid": "e6a09d4f-cd94-4004-8ff1-91bccd5c9904", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/secdb.bsky.social/post/3mtwfk57fjn2v", "content": "\ud83d\udea8 CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0825)\n\n\u26a0\ufe0f CVE-2026-60004 - Gitea Code Injection Vulnerability\n\n\n#ZEN #SecDB #InfoSec #CISA_KEV", "creation_timestamp": "2026-08-25T18:00:20.156779Z"}, {"uuid": "aaffa34c-2f1c-413b-83ea-92e0a5206252", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mtyomwmzjk24", "content": "\ud83e\udd16 CVE-2026-60004: critical code injection in Gitea allows pre-auth shell command execution via open registration. Actively exploited; CISA KEV added. Fixed in 1.27.1.\nhttps://www.bleepingcomputer.com/news/security/hackers-now-exploit-critical-gitea-flaw-in-code-injection-attacks/", "creation_timestamp": "2026-08-26T15:48:16.928748Z"}, {"uuid": "ff54409e-5174-491b-9cac-b1d235d634e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://t.me/pphm_HackerNews/2869", "content": "\ud83d\udd34 Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation efforts targeting a recently patched critical security flaw impacting Gitea.\n\nThe vulnerability in question is CVE-2026-60004 (CVSS score: 9.8), a case of remote code execution that allows an attacker with ordinary write access to a repository to execute arbitrary shell commands as the Gitea OS user.", "creation_timestamp": "2026-08-26T16:00:04.382870Z"}, {"uuid": "66011543-fab4-4144-8aac-3bd5995dd236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mtypi7dnfn2s", "content": "CVE-2026-60004: Critical Gitea RCE Exploited to Deploy Miner\n\n", "creation_timestamp": "2026-08-26T16:03:32.370290Z"}, {"uuid": "405af267-f5ed-42d9-a93b-4b79c8ea5f61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/cybercod.bsky.social/post/3mtwibnsstt2j", "content": "Gitea admins, take note! Since CVE-2026-60004 is now in the KEV, it\u2019s being actively exploited. Prioritize patching your instances ASAP to stay secure. \ud83d\udee1\ufe0f", "creation_timestamp": "2026-08-25T18:49:16.741189Z"}, {"uuid": "a2430bf9-7deb-4309-af94-8784a2cf4853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mtwim7t6em2e", "content": "\ud83d\udd34 EXPLOITED\n\nGitea, the self-hosted Git service, has a critical bug (CVE-2026-60004): any user can run code on the server.\n\nOpen signups let a stranger register and exploit it. Now on CISA's exploited list.\n\nFix: patch to 1.27.1.", "creation_timestamp": "2026-08-25T18:55:13.492118Z"}, {"uuid": "c1f608f1-2a7b-4165-bcc9-6caa499268e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevato-sfruttamento-di-vulnerabilita-in-gitea", "content": "", "creation_timestamp": "2026-08-26T16:45:02.528731Z"}, {"uuid": "c2b4b031-36a1-4a58-ac78-00e165df86e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117157758952896525", "content": "CISA has updated the KEV catalogue.\n- CVE-2026-60004: Gitea Code Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-60004\n- Industrial vulnerability: Rently Smart Home https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-01\nAlso:\nPress release: CISA Advisory Highlights Red Team Findings to Help Organizations Assess Risk, Identify Threats and Enable Effective Incident Response https://www.cisa.gov/news-events/news/cisa-advisory-highlights-red-team-findings-help-organizations-assess-risk-identify-threats-and\nThe advisory:  A Tale of Two SOCs: Insights From Two Red Team Assessments https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-237a #CISA #infosec #vulnerability", "creation_timestamp": "2026-08-25T19:18:51.838372Z"}, {"uuid": "c63e97d6-e8ad-4c87-b70a-fd105ca3eec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/gitea-security-advisory-av26-845", "content": "", "creation_timestamp": "2026-08-25T20:15:03.584623Z"}, {"uuid": "a8166f39-63e2-4fc4-8ed5-252cc5131a71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://t.me/pphm_HackerNews/2376", "content": "\ud83d\udd34 New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands\n\nGitea, the self-hosted Git platform, has patched a critical remote code execution vulnerability. A user with ordinary repository write access can turn attacker-controlled patch content into a live Git hook and run shell commands as the Gitea service account.\n\nTracked as CVE-2026-60004 (CVSS score: 9.8), the flaw affects Gitea versions 1.17 and later before 1.27.1 and is fixed in 1.27.1. The vulnerable API call requires authentication and repository write permission. But Gitea enables registration by default, so an outside visitor can create a normal account and repository on an unchanged installation, then exploit the bug without pre-existing credentials.", "creation_timestamp": "2026-08-23T00:00:45.658812Z"}, {"uuid": "72c138a7-72bb-42cc-b183-6bca2872e4bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mtwozlpcmc27", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-60004: Gitea Code Injection Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-60004", "creation_timestamp": "2026-08-25T20:50:06.496423Z"}, {"uuid": "3d11d853-7c77-4790-86c0-65edd3c50552", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mtwtnyru6y2k", "content": "\ud83d\udea8 Critical Threat Intel: CVE-2026-60004 targets Gitea via diffpatch API code injection. Review execution vectors, persistence mechanics, and active endpoint hardening actions to secure your version control infrastructure. https://thecybermind.co/jily", "creation_timestamp": "2026-08-25T22:13:02.862747Z"}, {"uuid": "9061db6c-a4ea-42e0-91d7-7cd707640dd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mtxllxfdz52f", "content": "CISA Adds One Known Exploited Vulnerability to Catalog (CISA\u304c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30921\u4ef6\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0) #CISA (Aug 25)\n\nCVE-2026-60004 Gitea\u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-08-26T05:21:23.424327Z"}, {"uuid": "6b27c307-03b0-4504-bc3f-e124a54af677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mtxm7z6owf2v", "content": "CVE-2026-60004 in Gitea enables remote code execution via diffpatch injection and is being exploited, prompting CISA to require rapid patching.\n", "creation_timestamp": "2026-08-26T05:32:36.839635Z"}, {"uuid": "e1a1bad4-0388-45fe-be46-2c9d2122ba27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtxr667dqn2q", "content": "Gitea 1.27.1\u3067\u4fee\u6b63\u3055\u308c\u305f\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\uff08CVE-2026-60004\uff09\u304c\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u307e\u3059\u3002", "creation_timestamp": "2026-08-26T07:01:07.169151Z"}, {"uuid": "aff660bd-b541-400d-a29f-211b6ad1c5ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://thehackernews.com/2026/08/critical-gitea-rce-actively-exploited.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation efforts targeting a recently patched critical security flaw impacting Gitea.\n\nThe vulnerability in question is CVE-2026-60004 (CVSS score: 9.8), a case of remote code execution that allows an attacker with ordinary write access to a repository to execute arbitrary shell commands as the", "creation_timestamp": "2026-08-26T10:00:38.811048Z"}, {"uuid": "f1198e6d-f801-4ad3-b03a-cfaa634b802b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mty3d3nvma2b", "content": "Gitea CVE-2026-60004: Real-World Victim Reports CPU Spike and Dropper", "creation_timestamp": "2026-08-26T10:02:45.973929Z"}, {"uuid": "09106a97-7302-4e47-bdc3-44a8ecf06028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrrhfbohdx2w", "content": "CVE-2026-60004 is a critical Gitea RCE via a diffpatch Git hook, rated CVSS 9.8. Full details and a public PoC are out. Update to Gitea 1.27.1 now.\n\n#Gitea #CVE202660004 #RCE #RemoteCodeExecution #GitHook #CyberSecurity", "creation_timestamp": "2026-07-29T07:59:42.761850Z"}, {"uuid": "7df74447-6d02-4fb5-84e0-fe19a74bbc5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mrrhkep54z23", "content": "Gitea's critical RCE flaw (CVE-2026-60004) lets repo writers run shell commands. Update to 1.27.1 now. #Gitea #CVE202660004 #RCE #CyberSecurity #Git #DevOps thedailytechfeed.com/critical-rce...", "creation_timestamp": "2026-07-29T08:02:34.108623Z"}, {"uuid": "88e89b88-e186-4976-af20-41494eed6f8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://t.me/thehackernews/9644", "content": "\ud83d\udea8 New Gitea RCE (CVE-2026-60004) lets repository writers plant a malicious Git hook and run shell commands as the Gitea service account.\n\nOn default-configured instances, outsiders can register, create a repository, and obtain the required write access.\n\nA public PoC is available.\n\nFind details here: https://thehackernews.com/2026/07/new-gitea-rce-lets-repository-writers.html", "creation_timestamp": "2026-07-29T09:00:07.191717Z"}, {"uuid": "cc86b085-e5c2-4889-ab7d-c8787566025d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mrrtfaoc2f2o", "content": "\ud83e\udd16 CVE-2026-60004 (CVSS 9.8): RCE in Gitea. A repo write user can submit a crafted patch to the /diffpatch endpoint, plant a Git hook, and execute shell commands. Versions < 1.27.1. Patch out.\nhttps://thehackernews.com/2026/07/new-gitea-rce-lets-repository-writers.html", "creation_timestamp": "2026-07-29T11:34:26.284976Z"}, {"uuid": "b0f0a3d0-c0be-4060-8281-b6add2d04ae2", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ab65f384-88ac-4a9f-ba63-0becdc49d154", "content": "", "creation_timestamp": "2026-08-26T11:00:28.834034Z"}, {"uuid": "8ac4838b-587d-4b6f-82c0-9c4c3dce6ad1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mty6unl4g22p", "content": "Critical Gitea vulnerability now exploited in the wild (CVE-2026-60004)\n\n\ud83d\udd17 Read more: www.helpnetsecurity.com/2026/08/26/g...\n\n #exploit #opensource #cybersecurity", "creation_timestamp": "2026-08-26T11:06:18.657974Z"}, {"uuid": "23ed05a5-d52d-46a9-8ebb-0e83013b218c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/mentedehackers.bsky.social/post/3mty6vru4ej2i", "content": "CISA advierte de explotaci\u00f3n de vulnerabilidad en Gitea\n\nCISA alerta sobre explotaci\u00f3n de una vulnerabilidad en Gitea CVE-2026-60004. La falla\u2026\n\nhttps://mentehackers.com/cisa-advierte-de-explotacion-de-vulnerabilidad-en-gitea-1fb16fb5\n#Ciberseguridad #Tecnologia #MenteHackers", "creation_timestamp": "2026-08-26T11:06:54.438881Z"}, {"uuid": "de68e703-fcb3-44f7-b26c-cc0210453c5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mty6xreyro2f", "content": "Gitea \u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3001\u5b9f\u74b0\u5883\u3067\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u308b\uff08CVE-2026-60004\uff09\n\nGit\u306e\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u300cGitea\u300d\u306b\u5b58\u5728\u3059\u308b\u91cd\u5927\u306a\u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027CVE-2026-60004\u304c\u3001\u653b\u6483\u8005\u306b\u3088\u3063\u3066\u60aa\u7528\u3055\u308c\u59cb\u3081\u3066\u3044\u308b\u3053\u3068\u304c\u5206\u304b\u308a\u307e\u3057\u305f\u3002CISA\u306f\u706b\u66dc\u65e5\u3001\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u306b\u3053\u306e\u8106\u5f31\u6027\u3092\u8ffd\u52a0\u3057\u305f\u3053\u3068\u3092\u78ba\u8a8d\u3057\u307e\u3057\u305f\u3002 KEV\u306e\u8a18\u8f09\u5185\u5bb9\u306b\u306f\u3001\u3053\u306e\u653b\u6483\u306e...", "creation_timestamp": "2026-08-26T11:08:00.626438Z"}, {"uuid": "d0fbd556-4abe-4d13-85ab-45d700f93376", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/g38DleJHgOgrObzOzogNy-FQ9NoQ3t7D9hzvmW22jIm78xQ", "content": "", "creation_timestamp": "2026-07-29T13:00:06.264990Z"}, {"uuid": "431844fb-cab1-418d-9f25-b7c750062b0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://thehackernews.com/2026/07/new-gitea-rce-lets-repository-writers.html", "content": "Gitea, the self-hosted Git platform, has patched a critical remote code execution vulnerability. A user with ordinary repository write access can turn attacker-controlled patch content into a live Git hook and run shell commands as the Gitea service account.\n\nTracked as CVE-2026-60004 (CVSS score: 9.8), the flaw affects Gitea versions 1.17 and later before 1.27.1 and is fixed in 1.27.1. The", "creation_timestamp": "2026-07-29T13:00:52.185090Z"}, {"uuid": "2ed450d9-45b9-4769-91ec-faf5ad1ee2d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/techoverload.bsky.social/post/3mrs23ihcpb2e", "content": "Gitea RCE (CVE-2026-60004, CVSS 9.8): anyone with repo write access can plant a git hook and run shell commands as the Gitea service account. Open registration is on by default, so self-hosters\u2014update to 1.27.1 and disable open registration now. \ud83d\udd12\n\n#SelfHosting #Security #FOSS", "creation_timestamp": "2026-07-29T13:34:15.274358Z"}, {"uuid": "50268a60-f178-4556-b803-163cc68b61d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/TzHuoTQGGjrCLjvjb-w7G7VP2W7wuY36FTV_RC7C2rNjBX8", "content": "", "creation_timestamp": "2026-07-29T20:00:04.165151Z"}, {"uuid": "44845c3b-caa5-4660-bb14-5f01eaaae754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/FFZlII9he5d1Fuscjf7MrqE5pZIDGxpq32yulECS4VZGDw", "content": "", "creation_timestamp": "2026-07-30T00:00:03.776170Z"}, {"uuid": "5b682ab8-3e0e-4878-bb2d-e61c094526c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/g38DleJHgOgrObzOzogNy-FQ9NoQ3t7D9hzvmW22jIm78xQ", "content": "", "creation_timestamp": "2026-07-30T00:00:29.489611Z"}, {"uuid": "25dd6a62-1d55-4e0d-a85c-98513b449e9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mtyah7suik2y", "content": "Critical Gitea vulnerability now exploited in the wild (CVE-2026-60004)\n\nwww.helpnetsecurity.com/2026/08/26/g...\n\n#Cybersecurity #LargeScaleImpact #Vulnerability", "creation_timestamp": "2026-08-26T11:34:34.407381Z"}, {"uuid": "99ed8bfa-ef0b-409a-b4dd-6b657347502b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/TzHuoTQGGjrCLjvjb-w7G7VP2W7wuY36FTV_RC7C2rNjBX8", "content": "", "creation_timestamp": "2026-07-30T00:00:21.580567Z"}, {"uuid": "513d749d-caac-445a-8c7e-3256a0aa3a28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9644", "content": "\ud83d\udea8 New Gitea RCE (CVE-2026-60004) lets repository writers plant a malicious Git hook and run shell commands as the Gitea service account.\n\nOn default-configured instances, outsiders can register, create a repository, and obtain the required write access.\n\nA public PoC is available.\n\nFind details here: https://thehackernews.com/2026/07/new-gitea-rce-lets-repository-writers.html", "creation_timestamp": "2026-07-30T00:02:07.182182Z"}]}