{"vulnerability": "cve-2026-60004", "sightings": [{"uuid": "91789089-6e38-4654-b779-0f0aec1275ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://t.me/GithubRedTeam/95817", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a EQSTLab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-30 08:22:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGitea diffpatch RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-30T10:00:02.247468Z"}, {"uuid": "f4d29bfb-66dc-49c5-b897-d5a5956ef288", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://t.me/cyberwarehouse/1175", "content": "\ud83d\udea8 New Gitea RCE (CVE-2026-60004) lets repository writers plant a malicious Git hook and run shell commands as the Gitea service account.\n\nOn default-configured instances, outsiders can register, create a repository, and obtain the required write access.\n\nA public PoC is available.\n\nFind details here: https://thehackernews.com/2026/07/new-gitea-rce-lets-repository-writers.html", "creation_timestamp": "2026-07-30T10:00:02.386115Z"}, {"uuid": "b1bfd8af-894f-4927-8b83-6b675ecfd7e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://thehackernews.com/2026/07/new-gitea-rce-lets-repository-writers.html", "content": "Gitea, the self-hosted Git platform, has patched a critical remote code execution vulnerability. A user with ordinary repository write access can turn attacker-controlled patch content into a live Git hook and run shell commands as the Gitea service account.\n\nTracked as CVE-2026-60004 (CVSS score: 9.8), the flaw affects Gitea versions 1.17 and later before 1.27.1 and is fixed in 1.27.1. The", "creation_timestamp": "2026-07-30T01:00:43.682929Z"}, {"uuid": "438d7814-8e8d-4a9a-a090-4d1fc3e51560", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/y-21MzKnE9UtyaE5ab_pL94fhj_dfFdxSXCYpnNpKZOg4AI", "content": "", "creation_timestamp": "2026-07-30T14:00:04.601753Z"}, {"uuid": "ab5bcced-4e44-46b2-bcf2-3637d4d1b9f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/4UmGIQtfBl8KQZeNab7MkdV3KJBv_MFiZ_bvWr3ttjSdt98", "content": "", "creation_timestamp": "2026-07-30T19:00:04.297923Z"}, {"uuid": "7e5db307-1d1d-4faa-b80b-b7a9742cc5cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/R-K8yexL9h9FqCu7kuwBiYvy86poGzTHuRy3PTR8RVZt5C0", "content": "", "creation_timestamp": "2026-08-04T17:00:04.477047Z"}, {"uuid": "b4d5a74f-9776-4409-8aae-b560dad3cf9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/LqdU20CE0Hk-SL_FPOS2WnuOEvVMOSrUkoEKMOvVibc5ya4", "content": "", "creation_timestamp": "2026-08-04T17:00:04.703972Z"}, {"uuid": "823ac9a2-302b-4bcc-bb24-cb3d1eb36a21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96399", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a imbas007\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-03 07:59:42\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-03T10:31:25.365110Z"}, {"uuid": "d2ef21a5-18da-4b54-8869-bd3b972e0aa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/y-21MzKnE9UtyaE5ab_pL94fhj_dfFdxSXCYpnNpKZOg4AI", "content": "", "creation_timestamp": "2026-07-31T00:00:29.746750Z"}, {"uuid": "3a415038-f879-4a43-8bd3-5a21044aea5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/1175", "content": "\ud83d\udea8 New Gitea RCE (CVE-2026-60004) lets repository writers plant a malicious Git hook and run shell commands as the Gitea service account.\n\nOn default-configured instances, outsiders can register, create a repository, and obtain the required write access.\n\nA public PoC is available.\n\nFind details here: https://thehackernews.com/2026/07/new-gitea-rce-lets-repository-writers.html", "creation_timestamp": "2026-07-31T00:00:34.744565Z"}, {"uuid": "c4c8bdfa-672f-4ed2-beed-42b666f9c94a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95817", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a EQSTLab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-30 08:22:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGitea diffpatch RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-31T00:00:34.885201Z"}, {"uuid": "573ecc30-8d2b-4d9e-a14e-cdaab5178ee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/FFZlII9he5d1Fuscjf7MrqE5pZIDGxpq32yulECS4VZGDw", "content": "", "creation_timestamp": "2026-07-31T00:00:45.031456Z"}, {"uuid": "445d5d3e-daef-478a-8822-b16c64e692c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/4UmGIQtfBl8KQZeNab7MkdV3KJBv_MFiZ_bvWr3ttjSdt98", "content": "", "creation_timestamp": "2026-07-31T01:00:09.816493Z"}, {"uuid": "60afe3f9-b543-47c4-ab61-c5121b0fff8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/-yvSoR82NqkZYRFAJ0RPwns7oo0m2sVtQANb6s2__TWozPg", "content": "", "creation_timestamp": "2026-07-31T03:00:03.304043Z"}, {"uuid": "de30d584-68e7-4202-973b-673218e3c34c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/SpHcF5o5W-zb5RnmDP-EoqwVpXHZEobhM5Z8fIn-sbJxq28", "content": "", "creation_timestamp": "2026-07-31T08:00:03.795818Z"}, {"uuid": "d4a5e6e7-6f5a-4c86-b3ce-443996a4d35e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/_3dDvw2gBKTVqJg_qD4Cxi_GWBZe501hrVnApmxGIoGryvk", "content": "", "creation_timestamp": "2026-08-03T13:23:49.445336Z"}, {"uuid": "04d49d60-e105-435c-bc90-d7da51999eb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96433", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-03 12:49:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-60004 \u2014 Gitea/Forgejo Diffpatch Git Hook RCE. Bare clone \u2192 post-index-change hook injection. CVSS 9.8 | CWE-94 | Gitea < 1.27.1\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-03T14:00:04.777086Z"}, {"uuid": "c1bf0cf3-50bf-44a3-9e00-6013f74363b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-60004.yaml", "content": "", "creation_timestamp": "2026-08-03T15:00:03.529283Z"}, {"uuid": "d7c864e2-35dd-4824-8a1d-e1d04d56b169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/R-K8yexL9h9FqCu7kuwBiYvy86poGzTHuRy3PTR8RVZt5C0", "content": "", "creation_timestamp": "2026-08-05T00:00:26.161423Z"}, {"uuid": "85bd6c02-0f54-49ea-91fe-ad80ff3d2b25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/LqdU20CE0Hk-SL_FPOS2WnuOEvVMOSrUkoEKMOvVibc5ya4", "content": "", "creation_timestamp": "2026-08-05T00:00:26.390322Z"}, {"uuid": "7dc3ed2e-b106-4cd1-9314-fe315099d74d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/fRn9WLRC1KE6ry6fn3owOvcDc4IpJXFhnXNgjnu-Gc8v93I", "content": "", "creation_timestamp": "2026-08-03T16:00:05.178685Z"}, {"uuid": "82b0d78a-db3d-443c-867b-c9d8ce830bf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/UBJmie2uo-nhNRmzuL-Rvz_YulwxG1KXQPPCce6f2SyQJL0", "content": "", "creation_timestamp": "2026-08-03T16:00:05.685180Z"}, {"uuid": "a00b2038-cd1b-4e4d-9cbc-b1e638c1f2b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-60004.yaml", "content": "", "creation_timestamp": "2026-08-05T00:00:05.651986Z"}, {"uuid": "cbfab159-9b3b-4b6c-906f-502e15eee236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/SpHcF5o5W-zb5RnmDP-EoqwVpXHZEobhM5Z8fIn-sbJxq28", "content": "", "creation_timestamp": "2026-08-01T00:00:36.568523Z"}, {"uuid": "2a6f8e63-0170-42c0-9643-4086fbed791a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/-yvSoR82NqkZYRFAJ0RPwns7oo0m2sVtQANb6s2__TWozPg", "content": "", "creation_timestamp": "2026-08-01T00:00:43.051167Z"}, {"uuid": "f3ce710d-3637-4af4-a090-01f288eec60f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-60004.yaml", "content": "", "creation_timestamp": "2026-08-04T00:00:05.535211Z"}, {"uuid": "27f55b3c-862d-4bd5-9365-3fd0827b4a5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96433", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-03 12:49:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-60004 \u2014 Gitea/Forgejo Diffpatch Git Hook RCE. Bare clone \u2192 post-index-change hook injection. CVSS 9.8 | CWE-94 | Gitea < 1.27.1\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-04T00:00:37.633972Z"}, {"uuid": "95bb8eae-00be-4cb6-9047-46d84b20e2cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/fRn9WLRC1KE6ry6fn3owOvcDc4IpJXFhnXNgjnu-Gc8v93I", "content": "", "creation_timestamp": "2026-08-04T00:00:33.432808Z"}, {"uuid": "44ad98ab-bc43-41eb-bf6f-8c0b3e2969a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/UBJmie2uo-nhNRmzuL-Rvz_YulwxG1KXQPPCce6f2SyQJL0", "content": "", "creation_timestamp": "2026-08-04T00:00:33.926272Z"}, {"uuid": "0e3108e8-8406-4f88-9c8d-89509fe6171e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/_3dDvw2gBKTVqJg_qD4Cxi_GWBZe501hrVnApmxGIoGryvk", "content": "", "creation_timestamp": "2026-08-04T00:00:41.025955Z"}, {"uuid": "a735758e-6caf-4afd-a872-4540e8dd89d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96399", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a imbas007\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-03 07:59:42\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-04T00:00:43.455635Z"}, {"uuid": "0f184283-da14-46b1-b45f-728c6c71a140", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96662", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004-gitea-0day\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Sachinart\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 22:54:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-60004 \u2014 Gitea <= 1.27.0 Pre-Auth RCE \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-05T00:00:08.982185Z"}, {"uuid": "87c25d46-4581-4e3f-8241-8b614f0ab8a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://t.me/GithubRedTeam/96596", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HackSpeak\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 12:32:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGitea diffpatch RCE (CVE-2026-60004) PoC - repo-write to RCE as Gitea service account\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-04T14:00:05.949935Z"}, {"uuid": "6c1a7483-a83e-44e5-967c-2d4a7819c6ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96596", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HackSpeak\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 12:32:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGitea diffpatch RCE (CVE-2026-60004) PoC - repo-write to RCE as Gitea service account\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-05T00:00:28.500887Z"}, {"uuid": "79ecd110-e2f4-4a2a-9909-1963b4505b54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/8aloBXQPHHfouGKf0EgG60bQLDnPnRmnq1pCP7sMVPUrMUc", "content": "", "creation_timestamp": "2026-08-05T05:00:10.111220Z"}, {"uuid": "b58000d5-92f6-4502-a53d-e1b79f2621a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60004", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mualnylwnp2u", "content": "CVSS 9.8. Unauthenticated RCE. Gitea. Patch now.\n\nCVE-2026-60004 hits Gitea before 1.27.1.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-60004-gitea-unauthenticated-rce-exploited-in-wild-poc/\n\nby Yazoul AI #CyberSecurity #PatchNow", "creation_timestamp": "2026-08-29T19:16:29.540012Z"}, {"uuid": "06c2ea82-255d-49b1-bf55-b89f52def308", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97181", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004-poc-gitea\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a gagaltotal\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-08 13:08:39\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-60004 \u2014 Gitea Pre-Auth RCE via diffpatch hook injection\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-08T15:00:03.424874Z"}, {"uuid": "745a6bdc-8998-46bc-be25-09c003d2b546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/8Dh3YUE7Kfb7FvNcXIDSqcPSChtli_9yVwlxO3uxT68v6BA", "content": "", "creation_timestamp": "2026-08-08T23:24:01.095042Z"}, {"uuid": "1e18c350-865a-4422-a483-202e27b20ba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/8Dh3YUE7Kfb7FvNcXIDSqcPSChtli_9yVwlxO3uxT68v6BA", "content": "", "creation_timestamp": "2026-08-09T00:40:12.441728Z"}, {"uuid": "4514d4b0-848a-4d52-94cc-a2eef7e77a84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97181", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-60004-poc-gitea\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a gagaltotal\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-08 13:08:39\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-60004 \u2014 Gitea Pre-Auth RCE via diffpatch hook injection\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-09T00:46:43.170938Z"}, {"uuid": "aac22ff1-1cf2-49a4-9282-4c904877854f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://t.me/pphm_HackerNews/2376", "content": "\ud83d\udd34 New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands\n\nGitea, the self-hosted Git platform, has patched a critical remote code execution vulnerability. A user with ordinary repository write access can turn attacker-controlled patch content into a live Git hook and run shell commands as the Gitea service account.\n\nTracked as CVE-2026-60004 (CVSS score: 9.8), the flaw affects Gitea versions 1.17 and later before 1.27.1 and is fixed in 1.27.1. The vulnerable API call requires authentication and repository write permission. But Gitea enables registration by default, so an outside visitor can create a normal account and repository on an unchanged installation, then exploit the bug without pre-existing credentials.", "creation_timestamp": "2026-08-21T23:00:07.455430Z"}, {"uuid": "39a69246-eefc-4709-a914-6b724e23af85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/wffTTuVgQJ98JwhL42Ct7GiTcbOZOW8KxITp_kb-2yHdqmI", "content": "", "creation_timestamp": "2026-08-21T09:00:04.565162Z"}, {"uuid": "ca619ac9-d709-4a06-9055-7e22737c5ced", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/_vir8PHcFXMNY3qmJBX6iWTyJzWWGg928tieDwqp2_1Bjyo", "content": "", "creation_timestamp": "2026-08-09T05:11:07.929653Z"}, {"uuid": "ba3a7038-92cf-4d1a-a16d-5a29d13988d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-60004.yaml", "content": "", "creation_timestamp": "2026-08-06T00:00:06.835783Z"}, {"uuid": "57d81313-9152-4479-a254-a3a9b38e9b18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/8aloBXQPHHfouGKf0EgG60bQLDnPnRmnq1pCP7sMVPUrMUc", "content": "", "creation_timestamp": "2026-08-06T00:00:48.376373Z"}, {"uuid": "79698137-2da5-4569-86d5-6ab436b553a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/_vir8PHcFXMNY3qmJBX6iWTyJzWWGg928tieDwqp2_1Bjyo", "content": "", "creation_timestamp": "2026-08-10T00:00:09.519144Z"}, {"uuid": "c2e83d3b-dec2-4b15-9307-d036faa0aace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://t.me/pphm_HackerNews/2376", "content": "\ud83d\udd34 New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands\n\nGitea, the self-hosted Git platform, has patched a critical remote code execution vulnerability. A user with ordinary repository write access can turn attacker-controlled patch content into a live Git hook and run shell commands as the Gitea service account.\n\nTracked as CVE-2026-60004 (CVSS score: 9.8), the flaw affects Gitea versions 1.17 and later before 1.27.1 and is fixed in 1.27.1. The vulnerable API call requires authentication and repository write permission. But Gitea enables registration by default, so an outside visitor can create a normal account and repository on an unchanged installation, then exploit the bug without pre-existing credentials.", "creation_timestamp": "2026-08-22T00:00:11.032996Z"}, {"uuid": "98d6646d-675d-42e5-ab56-cd946209a07d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mu7wok4acx27", "content": "CISA just added a Gitea RCE to its known exploited list. Active attacks are dropping miner payloads.\n\nCVE-2026-60004.\n\nhttps://www.yazoul.net/news/article/critical-gitea-rce-actively-exploited-as-reported-attack-drops-miner-like-payloa/\n\nby Yazoul AI #InfoSec #ThreatIntel", "creation_timestamp": "2026-08-29T13:00:58.907623Z"}, {"uuid": "b1d78474-7a04-4436-bd9d-e3c8384780fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mu7xct7jk62u", "content": "~Cybergcca~\nGitea RCE CVE-2026-60004 is in CISA KEV; update affected Gitea, OpenSSL and WatchGuard products.\n-\nIOCs: CVE-2026-60004\n-\n#CVE-2026-60004 #ThreatIntel #Vulnerability", "creation_timestamp": "2026-08-29T13:12:19.545474Z"}, {"uuid": "97d2d7ee-09d4-4907-8963-6c269bcac33b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/wffTTuVgQJ98JwhL42Ct7GiTcbOZOW8KxITp_kb-2yHdqmI", "content": "", "creation_timestamp": "2026-08-22T00:00:28.600786Z"}, {"uuid": "f842909c-7cd6-4534-a373-242ea493264e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/geeknewsbot.bsky.social/post/3msxp6c47or2b", "content": "\ud648\ub7a9 \ud574\ud0b9 \uc0ac\uace0 \uc0ac\ud6c4 \ubd84\uc11d\n\n\uacf5\uac1c \uac00\uc785\uc774 \uc5f4\ub9b0 \ucc44 \uc9c0\uc6d0 \uc885\ub8cc\ub41c Forgejo v13 \uc744 \uc6b4\uc601\ud55c \ud648\ub7a9\uc774 CVE-2026-60004 \uc6d0\uaca9 \ucf54\ub4dc \uc2e4\ud589 \ucde8\uc57d\uc810\uc73c\ub85c \uce68\ud574\ub3fc \uc57d 24\uc2dc\uac04 \ub3d9\uc548 \uc554\ud638\ud654\ud3d0 \ucc44\uad74\uae30\ub97c \uc2e4\ud589\ud568 \uacf5\uaca9\uc790\ub294 \uacc4\uc815\uacfc \uc800\uc7a5\uc18c\ub97c \ub9cc\ub4e0 \ub4a4 diffpatch \uc5d4\ub4dc\ud3ec\uc778\ud2b8\uc5d0\uc11c \uc545\uc131 Git \ud6c5\uc744 \uc2e4\ud589\ud588\uc73c\uba70, \uacf5\uac1c\ub41c Nu...", "creation_timestamp": "2026-08-13T13:00:07.897986Z"}, {"uuid": "058eeeaa-d9e1-4064-8554-09af19b3b066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-60004.yaml", "content": "", "creation_timestamp": "2026-08-07T00:00:10.562035Z"}, {"uuid": "dbc31f1a-9daf-416b-a8ff-300ccabc787f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mtyefw6p3u2y", "content": "CISA says CVE-2026-60004 is actively exploited in Gitea, letting authenticated users run shell commands via the diffpatch API. Open registration can expose default installs. #Gitea #CISA #CodeInjection", "creation_timestamp": "2026-08-26T12:45:25.010643Z"}, {"uuid": "840f9f34-fa89-4898-a402-f9fe84c5a5e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://t.me/HackerNewscyber/3371", "content": "\u2708\ufe0f  \u0647\u0634\u062f\u0627\u0631 CISA \u062f\u0631\u0628\u0627\u0631\u0647 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0641\u0639\u0627\u0644 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u062f\u0631 Gitea\n\n\ud83c\udfa4\u0622\u0698\u0627\u0646\u0633 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0648 \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a \u0622\u0645\u0631\u06cc\u06a9\u0627 (CISA) \u0646\u0633\u0628\u062a \u0628\u0647 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0641\u0639\u0627\u0644 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2026-60004 \u062f\u0631 \u067e\u0644\u062a\u0641\u0631\u0645 \u0645\u062a\u0646\u200c\u0628\u0627\u0632 \u00ab\u06af\u06cc\u062a\u06cc\u0627\u00bb (Gitea) \u0647\u0634\u062f\u0627\u0631 \u062f\u0627\u062f.\n\n\ud83c\udfa5\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0632 \u0646\u0648\u0639 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u0633\u062a \u0648 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646\u06cc \u06a9\u0647 \u0628\u0647 \u06cc\u06a9 \u0645\u062e\u0632\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0646\u0648\u0634\u062a\u0646 \u062f\u0627\u0631\u0646\u062f\u060c \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0631\u0627\u0628\u0637 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0646\u0648\u06cc\u0633\u06cc diffpatch\u060c \u06a9\u062f\u0647\u0627\u06cc \u0645\u062e\u0631\u0628 \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u062f\u0631 \u0646\u0633\u062e\u0647 1.27.1 \u06af\u06cc\u062a\u06cc\u0627 \u0628\u0631\u0637\u0631\u0641 \u0634\u062f\u0647 \u0648 CISA \u0622\u0646 \u0631\u0627 \u0628\u0647 \u0641\u0647\u0631\u0633\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0634\u0646\u0627\u062e\u062a\u0647\u200c\u0634\u062f\u0647 \u0648 \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631\u06af\u0631\u0641\u062a\u0647 \u0627\u0636\u0627\u0641\u0647 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a.\n\n\u2708\ufe0f @HackerNewsCyber", "creation_timestamp": "2026-08-26T13:00:03.350570Z"}, {"uuid": "498a2b41-d891-41fa-91d2-7e5e49f7bbea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60004", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mtyfb6k5nk2q", "content": "\ud83d\udc1b VULNERABILITIES Critical Gitea vulnerability now exploited in the wild (CVE-2026-60004) \u2014 Help Net Security\nhttps://www.helpnetsecurity.com/2026/08/26/gitea-cve-2026-60004-exploited-in-the-wild/ #PatchManagement #Vulnerability #CVE", "creation_timestamp": "2026-08-26T13:00:38.966074Z"}, {"uuid": "60bf9357-be55-4e3e-a9ae-ada7c3e19f91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60004", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mu56qo2aoh2n", "content": "Gitea Code Injection Vulnerability https://0daynews.com/cves/cve-2026-60004", "creation_timestamp": "2026-08-28T10:47:25.513297Z"}, {"uuid": "3d0a70db-69b2-4240-b2a5-dce275c8f410", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60004", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117162038172183890", "content": "\ud83d\udcf0 CISA Warns of Actively Exploited Gitea RCE Flaw (CVE-2026-60004)\n\ud83d\udea8 CISA KEV ALERT: A critical RCE flaw in Gitea (CVE-2026-60004, CVSS 9.8) is actively exploited. Attackers can gain RCE on self-hosted Git servers. Patch to version 1.27.1 or later NOW. #Gitea #RCE #CISA #KEV #CVE202660004\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisa-warns-of-actively-exploited-gitea-rce-flaw-cve-2026-60004/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-26T13:27:20.337830Z"}, {"uuid": "9297caa5-d019-40ad-b5a9-afde210b41e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mtygrbfewf24", "content": "\ud83d\udea8 CISA KEV ALERT: A critical RCE flaw in Gitea (CVE-2026-60004, CVSS 9.8) is actively exploited. Attackers can gain RCE on self-hosted Git servers. Patch to version 1.27.1 or later NOW. #Gitea #RCE #CISA #KEV #CVE202660004\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-08-26T13:27:32.975098Z"}, {"uuid": "3b6ba592-d3db-41f3-8729-522d3d89502a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "exploited", "source": "https://t.me/information_security_channel/55803", "content": "CISA Warns of Exploited Gitea Vulnerability\nhttps://www.securityweek.com/cisa-warns-of-exploited-gitea-vulnerability/\n\nCVE-2026-60004 is a remote code execution vulnerability patched by Gitea developers in late July with the release of version 1.27.1.\nThe post CISA Warns of Exploited Gitea Vulnerability (https://www.securityweek.com/cisa-warns-of-exploited-gitea-vulnerability/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-08-26T14:00:05.691388Z"}, {"uuid": "f9df29db-426b-4150-8bdd-d22589ab5049", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/qhr7w023-vn7u1_ejg3FfnGZ1vCO9Tv-EvHPiDFbLb3J-JQ", "content": "", "creation_timestamp": "2026-08-27T12:00:09.782608Z"}, {"uuid": "c35fb9c8-b08f-4053-81b5-c2f3c9f4c8fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60004", "type": "seen", "source": "https://bsky.app/profile/etairos-ai.bsky.social/post/3mtyiuyssdi2j", "content": "Gitea RCE under active exploitation: CVE-2026-60004 turns a signup form into shell access.\nSelf-hosted Gitea often sits next to build and OT networks. Patch now.\n#ThreatIntel #ICS #CyberSecurity\nhttps://threat-intelligence.redeyesecurity.com/blog/gitea-diffpatch-rce-cve-2026-60004-exploited-2026", "creation_timestamp": "2026-08-26T14:05:26.017243Z"}, {"uuid": "69bd9e27-18d5-4ed0-8681-115efb0bff41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60004", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/117172989688882263", "content": "We are scanning/reporting Gitea instances vulnerable to CVE-2026-60004 (code injection), with 8393 IPs found vulnerable on 2026-08-27. This vulnerability exploited in the wild and on US CISACyber.  Top affected: China, Germany, US\nDashboard view:https://dashboard.shadowserver.org/statistics/combined/map/?date_range=1&map_type=std&source=http_vulnerable&source=http_vulnerable6&tag=cve-2026-60004%2B&data_set=count&scale=log&auto_update=on \nIP data shared in our Vulnerable HTTP reporting tagged 'cve-2026-60004': https://www.shadowserver.org/what-we-do/network-reporting/vulnerable-http-report/\nPatch Tracker: https://dashboard.shadowserver.org/statistics/combined/time-series/?date_range=30&source=http_vulnerable&source=http_vulnerable6&tag=cve-2026-60004%2B&dataset=unique_ips&limit=100&group_by=geo&stacking=stacked&auto_update=on\nExploit code is public. \nGitea advisory: https://blog.gitea.com/release-of-1.27.1/\nNVD entry: https://nvd.nist.gov/vuln/detail/cve-2026-60004", "creation_timestamp": "2026-08-28T11:52:14.680047Z"}, {"uuid": "0d99c8a9-e908-41ac-8ad9-6721b087193b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mu5chx5eos2l", "content": "We are scanning/reporting Gitea instances vulnerable to CVE-2026-60004 (code injection), with 8393 IPs found vulnerable on 2026-08-27. This vulnerability is exploited in the wild and on US CISA KEV. Top affected: China, Germany, US\n\nDashboard view:\ndashboard.shadowserver.org/statistics/c...", "creation_timestamp": "2026-08-28T11:54:48.900936Z"}, {"uuid": "e47aaaa3-930a-4ba0-8386-349aa599dff4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mu5cipyizk2l", "content": "We are scanning/reporting Gitea instances vulnerable to CVE-2026-60004 (code injection), with 8393 IPs found vulnerable on 2026-08-27. This vulnerability is exploited in the wild and on US CISA KEV. Top affected: China, Germany, US\n\nDashboard view:\ndashboard.shadowserver.org/statistics/c...", "creation_timestamp": "2026-08-28T11:54:49.817512Z"}, {"uuid": "8d0934a9-fcea-4e0e-8bb2-6e9d3a9e8c21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mu2sutcdic2h", "content": "\u3010\u7dca\u6025\u3011Gitea \u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\uff08CVE-2026-60004 / CVSS 9.8 CRITICAL\uff09\n\n\u81ea\u5df1\u30db\u30b9\u30c8\u578bGit\u30b5\u30fc\u30d3\u30b9\u306e1.17\u301c1.27.0\u304c\u5bfe\u8c61\u3067\u3059\u3002diffpatch API\u304b\u3089\u5b9f\u884c\u53ef\u80fd\u306aGit\u30d5\u30c3\u30af\u3092\u4ed5\u8fbc\u307e\u308c\u3001Gitea\u306e\u30b5\u30fc\u30d3\u30b9\u30a2\u30ab\u30a6\u30f3\u30c8\u6a29\u9650\u3067\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3055\u308c\u307e\u3059\u3002CISA\u304c8\u670825\u65e5\u306bKEV\u3078\u8ffd\u52a0\u3001\u662f\u6b63\u671f\u9650\u306f8\u670828\u65e5\u3002\n\u5bfe\u51e6: 1.27.1\u3078\u66f4\u65b0\u3057\u3066\u304f\u3060\u3055\u3044\u3002\u516c\u5f0f\u306e\u56de\u907f\u7b56\u306f\u3042\u308a\u307e\u305b\u3093\u3002\n\nforsmile.jp/articles/git...\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "creation_timestamp": "2026-08-27T12:09:37.682750Z"}, {"uuid": "b91c8970-1b03-4907-92a7-bf555779d826", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mtwfh7uz7m2s", "content": "\ud83d\uded1 CVE-2026-60004\nGitea Gitea\nKEV \u2705\nTL;DR: Gitea contains a code injection vulnerability that allows an attacker with repository write access to send a malicious\u2026\nhttps://cvesentinel.com/report/CVE-2026-60004?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-08-25T17:58:42.128307Z"}, {"uuid": "a07a81f1-92e2-4eda-9fca-7c22045ac1e9", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/96eebf87-b02d-4cdd-9c7f-6c5d0c932c3e", "content": "", "creation_timestamp": "2026-08-25T18:00:02.534858Z"}, {"uuid": "e6a09d4f-cd94-4004-8ff1-91bccd5c9904", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/secdb.bsky.social/post/3mtwfk57fjn2v", "content": "\ud83d\udea8 CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0825)\n\n\u26a0\ufe0f CVE-2026-60004 - Gitea Code Injection Vulnerability\n\n\n#ZEN #SecDB #InfoSec #CISA_KEV", "creation_timestamp": "2026-08-25T18:00:20.156779Z"}, {"uuid": "aaffa34c-2f1c-413b-83ea-92e0a5206252", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mtyomwmzjk24", "content": "\ud83e\udd16 CVE-2026-60004: critical code injection in Gitea allows pre-auth shell command execution via open registration. Actively exploited; CISA KEV added. Fixed in 1.27.1.\nhttps://www.bleepingcomputer.com/news/security/hackers-now-exploit-critical-gitea-flaw-in-code-injection-attacks/", "creation_timestamp": "2026-08-26T15:48:16.928748Z"}, {"uuid": "ff54409e-5174-491b-9cac-b1d235d634e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://t.me/pphm_HackerNews/2869", "content": "\ud83d\udd34 Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation efforts targeting a recently patched critical security flaw impacting Gitea.\n\nThe vulnerability in question is CVE-2026-60004 (CVSS score: 9.8), a case of remote code execution that allows an attacker with ordinary write access to a repository to execute arbitrary shell commands as the Gitea OS user.", "creation_timestamp": "2026-08-26T16:00:04.382870Z"}, {"uuid": "d23279f2-baba-4b02-b520-0ca018e16c6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mu2tuit2or2k", "content": "Critical Gitea vulnerability now exploited in the wild (CVE-2026-60004) #appsec", "creation_timestamp": "2026-08-27T12:27:19.816668Z"}, {"uuid": "66011543-fab4-4144-8aac-3bd5995dd236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mtypi7dnfn2s", "content": "CVE-2026-60004: Critical Gitea RCE Exploited to Deploy Miner\n\n", "creation_timestamp": "2026-08-26T16:03:32.370290Z"}, {"uuid": "405af267-f5ed-42d9-a93b-4b79c8ea5f61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/cybercod.bsky.social/post/3mtwibnsstt2j", "content": "Gitea admins, take note! Since CVE-2026-60004 is now in the KEV, it\u2019s being actively exploited. Prioritize patching your instances ASAP to stay secure. \ud83d\udee1\ufe0f", "creation_timestamp": "2026-08-25T18:49:16.741189Z"}, {"uuid": "a2430bf9-7deb-4309-af94-8784a2cf4853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mtwim7t6em2e", "content": "\ud83d\udd34 EXPLOITED\n\nGitea, the self-hosted Git service, has a critical bug (CVE-2026-60004): any user can run code on the server.\n\nOpen signups let a stranger register and exploit it. Now on CISA's exploited list.\n\nFix: patch to 1.27.1.", "creation_timestamp": "2026-08-25T18:55:13.492118Z"}, {"uuid": "c1f608f1-2a7b-4165-bcc9-6caa499268e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevato-sfruttamento-di-vulnerabilita-in-gitea", "content": "", "creation_timestamp": "2026-08-26T16:45:02.528731Z"}, {"uuid": "c2b4b031-36a1-4a58-ac78-00e165df86e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117157758952896525", "content": "CISA has updated the KEV catalogue.\n- CVE-2026-60004: Gitea Code Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-60004\n- Industrial vulnerability: Rently Smart Home https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-01\nAlso:\nPress release: CISA Advisory Highlights Red Team Findings to Help Organizations Assess Risk, Identify Threats and Enable Effective Incident Response https://www.cisa.gov/news-events/news/cisa-advisory-highlights-red-team-findings-help-organizations-assess-risk-identify-threats-and\nThe advisory:  A Tale of Two SOCs: Insights From Two Red Team Assessments https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-237a #CISA #infosec #vulnerability", "creation_timestamp": "2026-08-25T19:18:51.838372Z"}, {"uuid": "c63e97d6-e8ad-4c87-b70a-fd105ca3eec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/gitea-security-advisory-av26-845", "content": "", "creation_timestamp": "2026-08-25T20:15:03.584623Z"}, {"uuid": "72dc5230-49c8-4327-bf1d-d4cd488a52bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/cybereyeq.bsky.social/post/3mtyvn27rls25", "content": "CISA added CVE-2026-60004, an actively exploited code-injection flaw in self-hosted Gitea, to the KEV Catalog on 25 Aug. Federal fix due 28 Aug under BOD 26-04; patched in Gitea 1.27.1. https://www.cybereyeq.com/?utm_source=bluesky&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-26T17:53:36.887666Z"}, {"uuid": "a8166f39-63e2-4fc4-8ed5-252cc5131a71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://t.me/pphm_HackerNews/2376", "content": "\ud83d\udd34 New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands\n\nGitea, the self-hosted Git platform, has patched a critical remote code execution vulnerability. A user with ordinary repository write access can turn attacker-controlled patch content into a live Git hook and run shell commands as the Gitea service account.\n\nTracked as CVE-2026-60004 (CVSS score: 9.8), the flaw affects Gitea versions 1.17 and later before 1.27.1 and is fixed in 1.27.1. The vulnerable API call requires authentication and repository write permission. But Gitea enables registration by default, so an outside visitor can create a normal account and repository on an unchanged installation, then exploit the bug without pre-existing credentials.", "creation_timestamp": "2026-08-23T00:00:45.658812Z"}, {"uuid": "72c138a7-72bb-42cc-b183-6bca2872e4bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mtwozlpcmc27", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-60004: Gitea Code Injection Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-60004", "creation_timestamp": "2026-08-25T20:50:06.496423Z"}, {"uuid": "72c7d8a8-b718-4c98-a72d-6bc546147bc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "exploited", "source": "https://t.me/thehackernews/9893", "content": "\ud83d\udea8 Attackers are exploiting a critical Gitea RCE flaw.\n\nCVE-2026-60004 can let an external attacker gain repo write access via open registration and run shell commands as the Gitea service account.\n\nOne reported attack dropped cryptocurrency-miner-like malware.\n\nRead: https://thehackernews.com/2026/08/critical-gitea-rce-actively-exploited.html", "creation_timestamp": "2026-08-26T19:00:03.669817Z"}, {"uuid": "e9bd11d0-ced3-4502-8b9f-06016b5ce0bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/qhr7w023-vn7u1_ejg3FfnGZ1vCO9Tv-EvHPiDFbLb3J-JQ", "content": "", "creation_timestamp": "2026-08-28T00:00:52.475284Z"}, {"uuid": "3d11d853-7c77-4790-86c0-65edd3c50552", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mtwtnyru6y2k", "content": "\ud83d\udea8 Critical Threat Intel: CVE-2026-60004 targets Gitea via diffpatch API code injection. Review execution vectors, persistence mechanics, and active endpoint hardening actions to secure your version control infrastructure. https://thecybermind.co/jily", "creation_timestamp": "2026-08-25T22:13:02.862747Z"}, {"uuid": "65ba98d2-748a-45f5-babf-0a1ab2f683a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/idenhaus.bsky.social/post/3mtz7kd3dkr2z", "content": "CISA is warning of active exploitation efforts targeting a recently patched critical security flaw impacting Gitea. CVE-2026-60004 is a remote code execution vulnerability that allows an attacker with ordinary write access to a repository to execute arbitrary shell commands as the Gitea OS user.", "creation_timestamp": "2026-08-26T20:51:06.483181Z"}, {"uuid": "4fbc6e78-88e6-42ba-93af-a2c1bcbb575a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtza6hfxms2o", "content": "\ud83d\udd34 CVE-2026-60004 - Critical (9.8)\n\nGitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installat...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-60004/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-26T21:02:19.570682Z"}, {"uuid": "a24feecf-da5d-4491-ab44-89e98ae8f3a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "exploited", "source": "Telegram/3_PCmixRZKD616mGgxZ7XjOgGlkrPu2pELMCZYyqXilYjQ", "content": "", "creation_timestamp": "2026-08-28T00:01:00.571139Z"}, {"uuid": "8e5ee556-e98d-48d1-8bb0-ed5de68488bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtzdsvzm7u25", "content": "\ud83d\udea8 CVE-2026-60004 \u2014 CVSS 9.8 CRITICAL\n\nGitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-60004\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-26T22:07:26.098571Z"}, {"uuid": "3922b41d-e6fa-4871-9f17-0be7a2a23e36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "exploited", "source": "https://t.me/true_secator/8549", "content": "CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0430\u043c\u043e\u0440\u0430\u0437\u043c\u0435\u0449\u0430\u0435\u043c\u043e\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0435 Git Gitea.\n\n\u041f\u043e\u0434\u043e\u0431\u043d\u043e \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u043c \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u043c GitHub \u0438\u043b\u0438 GitLab SaaS, Gitea \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u043d\u0430\u0431\u043e\u0440 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 DevOps, \u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u0430 \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u043b\u044f \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041f\u041e.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c Salesforce \u0428\u0430\u0435\u043c \u0420\u043e\u0434\u043e\u043c CVE-2026-60004 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043d\u0430 \u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441\u043b\u0443\u0436\u0431\u044b Gitea, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0430\u0442\u0447\u0438 \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443 API diffpatch.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445 Gitea \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0441\u0430\u043c\u043e\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044f, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c, \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0439 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0438 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u044f\u044e\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438, \u043a\u043e\u043d\u0435\u0447\u043d\u0430\u044f \u0442\u043e\u0447\u043a\u0430 diffpatch \u0432 Gitea \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f Git-\u0445\u0443\u043a\u0430 \u0438\u0437 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0433\u043e \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u043c.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u043e\u0431\u044b\u0447\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439, \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Gitea.\n\n\u041f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u0441\u0435\u0442\u0438\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u043f\u0440\u0430\u0432\u0430 \u043d\u0430 \u0437\u0430\u043f\u0438\u0441\u044c, \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0432 \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0438 \u0441\u043e\u0437\u0434\u0430\u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439.\n\nGitea \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 27 \u0438\u044e\u043b\u044f 1.27.1 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f CVE-2026-60004, \u043f\u043e\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u044b.\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f Shadowserver, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u00a0\u043e\u043a\u043e\u043b\u043e 5000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Gitea, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0445\u0441\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0432 \u0441\u0435\u0442\u0438. \u041e\u0434\u043d\u0430\u043a\u043e \u043d\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0442\u043e\u043c, \u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u0437 \u043d\u0438\u0445 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0430\u043c\u0438 \u0438\u043b\u0438 \u0443\u0436\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u043e\u0442 \u0430\u0442\u0430\u043a CVE-2026-60004.\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a CISA\u00a0\u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430\u00a0\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 KEV, \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \n\n\u041f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0442\u0440\u0438\u0433\u0433\u0435\u0440\u043e\u043c \u0441\u0442\u0430\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445,\u00a0\u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u0435\u043c \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0434\u043b\u044f \u043c\u0430\u0439\u043d\u0438\u043d\u0433\u0430 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u044b \u043d\u0430 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 Gitea.\n\n\u0420\u0430\u043d\u0435\u0435 \u0432 \u0438\u044e\u043b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 Gitea (CVE-2026-20896) \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b Gitea \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430\u043c\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043a\u0441\u0438, \u0442\u0430\u043a\u0438\u043c\u0438 \u043a\u0430\u043a X-WEBAUTH-USER.", "creation_timestamp": "2026-08-28T00:01:01.918315Z"}, {"uuid": "235b65a5-e06e-45b3-a441-28ca7dccc0d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60004", "type": "seen", "source": "https://bsky.app/profile/endoflife.ai/post/3mu43gys5qd2f", "content": "\ud83d\udcd6 New from endoflife.ai:\n\nGitea's First KEV Entry: CVE-2026-60004, a Two-Day Federal Deadline, and a Release Policy With Nowhere to Hide\n\nhttps://endoflife.ai/article-gitea-cve-2026-60004", "creation_timestamp": "2026-08-28T00:15:35.974940Z"}, {"uuid": "86bfe96d-d7fa-4568-b2b6-c44822dc49be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/techoverload.bsky.social/post/3mu7yrdz3dt2u", "content": "More than 8,300 internet-exposed Gitea servers are still vulnerable to CVE-2026-60004, now under active attack. If you self-host Gitea, update to 1.27.1 or newer and check for compromise\u2014not just patch and move on. \ud83d\udd12\n\n#Security #SelfHosting #OpenSource", "creation_timestamp": "2026-08-29T13:38:22.111026Z"}, {"uuid": "2786478c-3738-4e85-b7a7-f2517dc8a665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mtzhd5igt52r", "content": "Every self-hosted Gitea server on a version before 1.27.1 is a live target. CISA added CVE-2026-60004 to its exploited-vulnerabilities catalog on August 25 and gave federal agencies until August 28 to patch. Basic repo write access is enough to run shell commands on the server.", "creation_timestamp": "2026-08-26T23:10:13.039995Z"}, {"uuid": "f7602c90-2456-413c-8950-6f59d7ad2abb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mu5l6zrewt2u", "content": "\ud83d\udce2 [VULN] CVE-2026-60004 : RCE critique de Gitea exploit\u00e9e pour d\u00e9ployer des charges utiles semblables \u00e0 des mineurs | SOC Prime\n\nUne vuln\u00e9rabilit\u00e9 critique d\u2019ex\u00e9cution de code \u00e0 distance dans Gitea est pass\u00e9e de la divulgation \u00e0 une exploitation active moins d\u2019un m\u2026\n\n#Vuln\u00e9rabilit\u00e9 #CVE #Cyberveille", "creation_timestamp": "2026-08-28T14:30:10.798699Z"}, {"uuid": "f005fbe2-96a3-4285-894c-043c3f2188e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "exploited", "source": "https://t.me/HackerNewscyber/3371", "content": "\u2708\ufe0f  \u0647\u0634\u062f\u0627\u0631 CISA \u062f\u0631\u0628\u0627\u0631\u0647 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0641\u0639\u0627\u0644 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u062f\u0631 Gitea\n\n\ud83c\udfa4\u0622\u0698\u0627\u0646\u0633 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0648 \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a \u0622\u0645\u0631\u06cc\u06a9\u0627 (CISA) \u0646\u0633\u0628\u062a \u0628\u0647 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0641\u0639\u0627\u0644 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2026-60004 \u062f\u0631 \u067e\u0644\u062a\u0641\u0631\u0645 \u0645\u062a\u0646\u200c\u0628\u0627\u0632 \u00ab\u06af\u06cc\u062a\u06cc\u0627\u00bb (Gitea) \u0647\u0634\u062f\u0627\u0631 \u062f\u0627\u062f.\n\n\ud83c\udfa5\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0632 \u0646\u0648\u0639 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u0633\u062a \u0648 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646\u06cc \u06a9\u0647 \u0628\u0647 \u06cc\u06a9 \u0645\u062e\u0632\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0646\u0648\u0634\u062a\u0646 \u062f\u0627\u0631\u0646\u062f\u060c \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0631\u0627\u0628\u0637 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0646\u0648\u06cc\u0633\u06cc diffpatch\u060c \u06a9\u062f\u0647\u0627\u06cc \u0645\u062e\u0631\u0628 \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u062f\u0631 \u0646\u0633\u062e\u0647 1.27.1 \u06af\u06cc\u062a\u06cc\u0627 \u0628\u0631\u0637\u0631\u0641 \u0634\u062f\u0647 \u0648 CISA \u0622\u0646 \u0631\u0627 \u0628\u0647 \u0641\u0647\u0631\u0633\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0634\u0646\u0627\u062e\u062a\u0647\u200c\u0634\u062f\u0647 \u0648 \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631\u06af\u0631\u0641\u062a\u0647 \u0627\u0636\u0627\u0641\u0647 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a.\n\n\u2708\ufe0f @HackerNewsCyber", "creation_timestamp": "2026-08-27T00:00:10.163341Z"}, {"uuid": "0e7d8a93-845f-4916-b43f-8f5f5b6dfe09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://t.me/true_secator/8549", "content": "CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0430\u043c\u043e\u0440\u0430\u0437\u043c\u0435\u0449\u0430\u0435\u043c\u043e\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0435 Git Gitea.\n\n\u041f\u043e\u0434\u043e\u0431\u043d\u043e \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u043c \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u043c GitHub \u0438\u043b\u0438 GitLab SaaS, Gitea \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u043d\u0430\u0431\u043e\u0440 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 DevOps, \u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u0430 \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u043b\u044f \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041f\u041e.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c Salesforce \u0428\u0430\u0435\u043c \u0420\u043e\u0434\u043e\u043c CVE-2026-60004 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043d\u0430 \u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441\u043b\u0443\u0436\u0431\u044b Gitea, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0430\u0442\u0447\u0438 \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443 API diffpatch.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445 Gitea \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0441\u0430\u043c\u043e\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044f, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c, \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0439 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0438 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u044f\u044e\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438, \u043a\u043e\u043d\u0435\u0447\u043d\u0430\u044f \u0442\u043e\u0447\u043a\u0430 diffpatch \u0432 Gitea \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f Git-\u0445\u0443\u043a\u0430 \u0438\u0437 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0433\u043e \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u043c.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u043e\u0431\u044b\u0447\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439, \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Gitea.\n\n\u041f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u0441\u0435\u0442\u0438\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u043f\u0440\u0430\u0432\u0430 \u043d\u0430 \u0437\u0430\u043f\u0438\u0441\u044c, \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0432 \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0438 \u0441\u043e\u0437\u0434\u0430\u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439.\n\nGitea \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 27 \u0438\u044e\u043b\u044f 1.27.1 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f CVE-2026-60004, \u043f\u043e\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u044b.\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f Shadowserver, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u00a0\u043e\u043a\u043e\u043b\u043e 5000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Gitea, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0445\u0441\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0432 \u0441\u0435\u0442\u0438. \u041e\u0434\u043d\u0430\u043a\u043e \u043d\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0442\u043e\u043c, \u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u0437 \u043d\u0438\u0445 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0430\u043c\u0438 \u0438\u043b\u0438 \u0443\u0436\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u043e\u0442 \u0430\u0442\u0430\u043a CVE-2026-60004.\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a CISA\u00a0\u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430\u00a0\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 KEV, \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \n\n\u041f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0442\u0440\u0438\u0433\u0433\u0435\u0440\u043e\u043c \u0441\u0442\u0430\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445,\u00a0\u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u0435\u043c \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0434\u043b\u044f \u043c\u0430\u0439\u043d\u0438\u043d\u0433\u0430 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u044b \u043d\u0430 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 Gitea.\n\n\u0420\u0430\u043d\u0435\u0435 \u0432 \u0438\u044e\u043b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 Gitea (CVE-2026-20896) \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b Gitea \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430\u043c\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043a\u0441\u0438, \u0442\u0430\u043a\u0438\u043c\u0438 \u043a\u0430\u043a X-WEBAUTH-USER.", "creation_timestamp": "2026-08-27T00:00:06.791312Z"}, {"uuid": "2b5199e7-21e3-41e8-8878-bea977735f94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "exploited", "source": "https://t.me/thehackernews/9893", "content": "\ud83d\udea8 Attackers are exploiting a critical Gitea RCE flaw.\n\nCVE-2026-60004 can let an external attacker gain repo write access via open registration and run shell commands as the Gitea service account.\n\nOne reported attack dropped cryptocurrency-miner-like malware.\n\nRead: https://thehackernews.com/2026/08/critical-gitea-rce-actively-exploited.html", "creation_timestamp": "2026-08-27T00:00:09.500837Z"}, {"uuid": "63862733-666e-45dc-991a-ab6144d9afd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "exploited", "source": "https://t.me/pphm_HackerNews/2869", "content": "\ud83d\udd34 Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation efforts targeting a recently patched critical security flaw impacting Gitea.\n\nThe vulnerability in question is CVE-2026-60004 (CVSS score: 9.8), a case of remote code execution that allows an attacker with ordinary write access to a repository to execute arbitrary shell commands as the Gitea OS user.", "creation_timestamp": "2026-08-27T00:00:09.555709Z"}, {"uuid": "2d720c0a-a49c-4b26-a38f-74785d7de448", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "exploited", "source": "https://t.me/information_security_channel/55803", "content": "CISA Warns of Exploited Gitea Vulnerability\nhttps://www.securityweek.com/cisa-warns-of-exploited-gitea-vulnerability/\n\nCVE-2026-60004 is a remote code execution vulnerability patched by Gitea developers in late July with the release of version 1.27.1.\nThe post CISA Warns of Exploited Gitea Vulnerability (https://www.securityweek.com/cisa-warns-of-exploited-gitea-vulnerability/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-08-27T00:00:10.372965Z"}, {"uuid": "ccfa041a-3ffd-48f2-bac6-4b2d2839f6a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mu4bofuumd23", "content": "\ud83d\udccc CVE-2026-60004 - Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation. https://www.cyberhub.blog/cves/CVE-2026-60004", "creation_timestamp": "2026-08-28T02:07:07.302983Z"}, {"uuid": "561343e6-54e8-4af8-9949-c581ebf962a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mu7gsjtnnx2v", "content": "Top 3 CVE for last 7 days:\nCVE-2026-41992: 43 interactions\nCVE-2026-73570: 20 interactions\nCVE-2026-60004: 18 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-60004: 11 interactions\nCVE-2026-65643: 9 interactions\nCVE-2026-19313: 4 interactions\n", "creation_timestamp": "2026-08-29T08:16:53.561924Z"}, {"uuid": "c269d3af-630b-492c-a95b-97f7eb4a790e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mu5pfo7vqd22", "content": "Over 8,300 Internet-exposed Gitea servers remain unpatched for CVE-2026-60004, a critical code injection flaw used for remote code execution and crypto-mining malware via the diffpatch API. #Gitea #CVE202660004 #CISA", "creation_timestamp": "2026-08-28T15:45:26.461069Z"}, {"uuid": "ba96bfd4-4ad9-48ce-89e6-608b788c748a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://thehackernews.com/2026/08/critical-gitea-rce-actively-exploited.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation efforts targeting a recently patched critical security flaw impacting Gitea.\n\nThe vulnerability in question is CVE-2026-60004 (CVSS score: 9.8), a case of remote code execution that allows an attacker with ordinary write access to a repository to execute arbitrary shell commands as the", "creation_timestamp": "2026-08-27T01:00:32.597316Z"}, {"uuid": "28195423-5273-4be2-a7f3-eb6ee76b1417", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mtzooxgxa52o", "content": "Gitea\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u304c\u5b9f\u969b\u306b\u60aa\u7528\u3055\u308c\u308b\uff08CVE-2026-60004\uff09 \n\nCritical Gitea vulnerability now exploited in the wild (CVE-2026-60004)  #HelpNetSecurity (Aug 26)\n\nwww.helpnetsecurity.com/2026/08/26/g...", "creation_timestamp": "2026-08-27T01:22:05.868627Z"}, {"uuid": "d122e766-723e-44fb-b124-a8974de6d4af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mtzv2sz7dc2o", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned of active exploitation of a critical RCE vulnerability in Gitea (CVE-2026-60004, CVSS 9.8). This flaw allows attackers with repository write access to execute arbitrary commands. It affects all versions prior to 1.27.1.", "creation_timestamp": "2026-08-27T03:16:06.627354Z"}, {"uuid": "4ad78d88-6bd9-41e2-93e8-4496599b84af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu22pqrkhk2m", "content": "\ud83d\udea8 CVE-2026-60004 \u2014 Gitea RCE actively exploited\n\nPublic PoC available, real-world attacks confirmed, and CISA has added it to KEV. Fixed in Gitea 1.27.1.\n\nstemshop.top/blog/cve-202...\n\n#CVE #Gitea #RCE #CyberSecurity #InfoSec #CISA", "creation_timestamp": "2026-08-27T04:57:23.987713Z"}, {"uuid": "185bab11-aa4a-4da8-b8a0-7c0a8d199799", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/qhr7w023-vn7u1_ejg3FfnGZ1vCO9Tv-EvHPiDFbLb3J-JQ", "content": "", "creation_timestamp": "2026-08-29T00:00:16.534125Z"}, {"uuid": "bb53c5b4-89dd-4639-b639-d1d4ecb8f4e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mu24n5wnpc2q", "content": "Critical Gitea vulnerability now exploited in the wild (CVE-2026-60004)\n\nAttackers have begun exploiting CVE-2026-60004, a critical code injection vulnerability in the Gitea Git platform, CISA confirmed on Tuesday by adding the vulnerability to its Known Exploited Vulnerabilities \u2026\n#hackernews #news", "creation_timestamp": "2026-08-27T05:31:37.569511Z"}, {"uuid": "f36760e3-3d4f-43a0-95dd-ca8beeff9fd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60004", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mu262bm7fh2w", "content": "\ud83d\udcf0 Peretas Aktif Eksploitasi Celah Kritis Gitea untuk Serangan Injeksi Kode dan Malware Mining\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/08/27/peretas-eksploitasi-celah-kritis-gitea-dalam-serangan-injeksi-kode/\n\n#cisaKev #codeInjection #cryptomining #cve-2026-60004 #devops #gi", "creation_timestamp": "2026-08-27T05:56:50.866288Z"}, {"uuid": "9061db6c-a4ea-42e0-91d7-7cd707640dd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mtxllxfdz52f", "content": "CISA Adds One Known Exploited Vulnerability to Catalog (CISA\u304c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30921\u4ef6\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0) #CISA (Aug 25)\n\nCVE-2026-60004 Gitea\u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-08-26T05:21:23.424327Z"}, {"uuid": "6b27c307-03b0-4504-bc3f-e124a54af677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mtxm7z6owf2v", "content": "CVE-2026-60004 in Gitea enables remote code execution via diffpatch injection and is being exploited, prompting CISA to require rapid patching.\n", "creation_timestamp": "2026-08-26T05:32:36.839635Z"}, {"uuid": "e1a1bad4-0388-45fe-be46-2c9d2122ba27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtxr667dqn2q", "content": "Gitea 1.27.1\u3067\u4fee\u6b63\u3055\u308c\u305f\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\uff08CVE-2026-60004\uff09\u304c\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u307e\u3059\u3002", "creation_timestamp": "2026-08-26T07:01:07.169151Z"}, {"uuid": "828bdd59-b2e5-4e9e-a317-beff40159ef6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/3_PCmixRZKD616mGgxZ7XjOgGlkrPu2pELMCZYyqXilYjQ", "content": "", "creation_timestamp": "2026-08-27T08:00:05.823918Z"}, {"uuid": "aff660bd-b541-400d-a29f-211b6ad1c5ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://thehackernews.com/2026/08/critical-gitea-rce-actively-exploited.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation efforts targeting a recently patched critical security flaw impacting Gitea.\n\nThe vulnerability in question is CVE-2026-60004 (CVSS score: 9.8), a case of remote code execution that allows an attacker with ordinary write access to a repository to execute arbitrary shell commands as the", "creation_timestamp": "2026-08-26T10:00:38.811048Z"}, {"uuid": "f1198e6d-f801-4ad3-b03a-cfaa634b802b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mty3d3nvma2b", "content": "Gitea CVE-2026-60004: Real-World Victim Reports CPU Spike and Dropper", "creation_timestamp": "2026-08-26T10:02:45.973929Z"}, {"uuid": "09106a97-7302-4e47-bdc3-44a8ecf06028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrrhfbohdx2w", "content": "CVE-2026-60004 is a critical Gitea RCE via a diffpatch Git hook, rated CVSS 9.8. Full details and a public PoC are out. Update to Gitea 1.27.1 now.\n\n#Gitea #CVE202660004 #RCE #RemoteCodeExecution #GitHook #CyberSecurity", "creation_timestamp": "2026-07-29T07:59:42.761850Z"}, {"uuid": "7df74447-6d02-4fb5-84e0-fe19a74bbc5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mrrhkep54z23", "content": "Gitea's critical RCE flaw (CVE-2026-60004) lets repo writers run shell commands. Update to 1.27.1 now. #Gitea #CVE202660004 #RCE #CyberSecurity #Git #DevOps thedailytechfeed.com/critical-rce...", "creation_timestamp": "2026-07-29T08:02:34.108623Z"}, {"uuid": "88e89b88-e186-4976-af20-41494eed6f8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://t.me/thehackernews/9644", "content": "\ud83d\udea8 New Gitea RCE (CVE-2026-60004) lets repository writers plant a malicious Git hook and run shell commands as the Gitea service account.\n\nOn default-configured instances, outsiders can register, create a repository, and obtain the required write access.\n\nA public PoC is available.\n\nFind details here: https://thehackernews.com/2026/07/new-gitea-rce-lets-repository-writers.html", "creation_timestamp": "2026-07-29T09:00:07.191717Z"}, {"uuid": "cc86b085-e5c2-4889-ab7d-c8787566025d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mrrtfaoc2f2o", "content": "\ud83e\udd16 CVE-2026-60004 (CVSS 9.8): RCE in Gitea. A repo write user can submit a crafted patch to the /diffpatch endpoint, plant a Git hook, and execute shell commands. Versions < 1.27.1. Patch out.\nhttps://thehackernews.com/2026/07/new-gitea-rce-lets-repository-writers.html", "creation_timestamp": "2026-07-29T11:34:26.284976Z"}, {"uuid": "ce6a6887-2ac5-4969-8ae5-7faba94e56a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mu63cmosde2f", "content": "CISA just added another Gitea RCE to its list. How many of you have already patched?\n\nCVE-2026-60004.\n\nhttps://www.yazoul.net/news/article/critical-gitea-rce-actively-exploited-as-reported-attack-drops-miner-like-payloa/\n\nby Yazoul AI #CVE #CyberSecurity", "creation_timestamp": "2026-08-28T19:18:33.921637Z"}, {"uuid": "b0f0a3d0-c0be-4060-8281-b6add2d04ae2", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ab65f384-88ac-4a9f-ba63-0becdc49d154", "content": "", "creation_timestamp": "2026-08-26T11:00:28.834034Z"}, {"uuid": "8ac4838b-587d-4b6f-82c0-9c4c3dce6ad1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mty6unl4g22p", "content": "Critical Gitea vulnerability now exploited in the wild (CVE-2026-60004)\n\n\ud83d\udd17 Read more: www.helpnetsecurity.com/2026/08/26/g...\n\n #exploit #opensource #cybersecurity", "creation_timestamp": "2026-08-26T11:06:18.657974Z"}, {"uuid": "23ed05a5-d52d-46a9-8ebb-0e83013b218c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/mentedehackers.bsky.social/post/3mty6vru4ej2i", "content": "CISA advierte de explotaci\u00f3n de vulnerabilidad en Gitea\n\nCISA alerta sobre explotaci\u00f3n de una vulnerabilidad en Gitea CVE-2026-60004. La falla\u2026\n\nhttps://mentehackers.com/cisa-advierte-de-explotacion-de-vulnerabilidad-en-gitea-1fb16fb5\n#Ciberseguridad #Tecnologia #MenteHackers", "creation_timestamp": "2026-08-26T11:06:54.438881Z"}, {"uuid": "de68e703-fcb3-44f7-b26c-cc0210453c5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mty6xreyro2f", "content": "Gitea \u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3001\u5b9f\u74b0\u5883\u3067\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u308b\uff08CVE-2026-60004\uff09\n\nGit\u306e\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u300cGitea\u300d\u306b\u5b58\u5728\u3059\u308b\u91cd\u5927\u306a\u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027CVE-2026-60004\u304c\u3001\u653b\u6483\u8005\u306b\u3088\u3063\u3066\u60aa\u7528\u3055\u308c\u59cb\u3081\u3066\u3044\u308b\u3053\u3068\u304c\u5206\u304b\u308a\u307e\u3057\u305f\u3002CISA\u306f\u706b\u66dc\u65e5\u3001\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u306b\u3053\u306e\u8106\u5f31\u6027\u3092\u8ffd\u52a0\u3057\u305f\u3053\u3068\u3092\u78ba\u8a8d\u3057\u307e\u3057\u305f\u3002 KEV\u306e\u8a18\u8f09\u5185\u5bb9\u306b\u306f\u3001\u3053\u306e\u653b\u6483\u306e...", "creation_timestamp": "2026-08-26T11:08:00.626438Z"}, {"uuid": "d0fbd556-4abe-4d13-85ab-45d700f93376", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/g38DleJHgOgrObzOzogNy-FQ9NoQ3t7D9hzvmW22jIm78xQ", "content": "", "creation_timestamp": "2026-07-29T13:00:06.264990Z"}, {"uuid": "431844fb-cab1-418d-9f25-b7c750062b0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://thehackernews.com/2026/07/new-gitea-rce-lets-repository-writers.html", "content": "Gitea, the self-hosted Git platform, has patched a critical remote code execution vulnerability. A user with ordinary repository write access can turn attacker-controlled patch content into a live Git hook and run shell commands as the Gitea service account.\n\nTracked as CVE-2026-60004 (CVSS score: 9.8), the flaw affects Gitea versions 1.17 and later before 1.27.1 and is fixed in 1.27.1. The", "creation_timestamp": "2026-07-29T13:00:52.185090Z"}, {"uuid": "2ed450d9-45b9-4769-91ec-faf5ad1ee2d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/techoverload.bsky.social/post/3mrs23ihcpb2e", "content": "Gitea RCE (CVE-2026-60004, CVSS 9.8): anyone with repo write access can plant a git hook and run shell commands as the Gitea service account. Open registration is on by default, so self-hosters\u2014update to 1.27.1 and disable open registration now. \ud83d\udd12\n\n#SelfHosting #Security #FOSS", "creation_timestamp": "2026-07-29T13:34:15.274358Z"}, {"uuid": "50268a60-f178-4556-b803-163cc68b61d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/TzHuoTQGGjrCLjvjb-w7G7VP2W7wuY36FTV_RC7C2rNjBX8", "content": "", "creation_timestamp": "2026-07-29T20:00:04.165151Z"}, {"uuid": "44845c3b-caa5-4660-bb14-5f01eaaae754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/FFZlII9he5d1Fuscjf7MrqE5pZIDGxpq32yulECS4VZGDw", "content": "", "creation_timestamp": "2026-07-30T00:00:03.776170Z"}, {"uuid": "5b682ab8-3e0e-4878-bb2d-e61c094526c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/g38DleJHgOgrObzOzogNy-FQ9NoQ3t7D9hzvmW22jIm78xQ", "content": "", "creation_timestamp": "2026-07-30T00:00:29.489611Z"}, {"uuid": "25dd6a62-1d55-4e0d-a85c-98513b449e9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mtyah7suik2y", "content": "Critical Gitea vulnerability now exploited in the wild (CVE-2026-60004)\n\nwww.helpnetsecurity.com/2026/08/26/g...\n\n#Cybersecurity #LargeScaleImpact #Vulnerability", "creation_timestamp": "2026-08-26T11:34:34.407381Z"}, {"uuid": "99ed8bfa-ef0b-409a-b4dd-6b657347502b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/TzHuoTQGGjrCLjvjb-w7G7VP2W7wuY36FTV_RC7C2rNjBX8", "content": "", "creation_timestamp": "2026-07-30T00:00:21.580567Z"}, {"uuid": "513d749d-caac-445a-8c7e-3256a0aa3a28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9644", "content": "\ud83d\udea8 New Gitea RCE (CVE-2026-60004) lets repository writers plant a malicious Git hook and run shell commands as the Gitea service account.\n\nOn default-configured instances, outsiders can register, create a repository, and obtain the required write access.\n\nA public PoC is available.\n\nFind details here: https://thehackernews.com/2026/07/new-gitea-rce-lets-repository-writers.html", "creation_timestamp": "2026-07-30T00:02:07.182182Z"}]}