ThreatVectr
Tag

#CVE-2026-20896

2 stories taggedCVE-2026-20896.

A code repository interface showing file directories and command execution logs, with a highlighted patch notice dated late July and a federal agency seal in th
Vulnerabilities

CISA: Hackers Are Actively Exploiting a Patched Gitea Flaw That Lets Them Run Malicious Commands

A security hole in Gitea, a widely used code-hosting platform, is being exploited in the wild. A patch has existed since late July, but federal agencies have until August 28 to apply it.

3 min read
Illustration: a dimly lit server room aisle with rows of glowing amber and blue rack lights
Identity & Access

Hackers Race to Exploit Gitea Flaw That Lets Anyone Log In as Admin

A missing check in Gitea's Docker images let attackers claim any username by adding a single header. Sysdig says probing began within days of the patch.

3 min read
© 2026 Threat Vectr