ThreatVectr
Tag

#gitea

3 stories taggedgitea.

Macro photograph of tangled fiber optic cables glowing in deep blue and green light against a dark server room background, sharp focus on the glass fiber tips w
Vulnerabilities

Gitea Patches Critical Flaw That Lets Repo Users Run Shell Commands

CVE-2026-60004 carries a 9.8 CVSS score and is fixed in Gitea 1.27.1. Anyone running an older self-hosted instance should update now.

3 min read
Full-frame photoreal editorial shot of a dimly lit server room aisle with rows of glowing amber and blue rack lights, one open cabinet door revealing exposed ca
Identity & Access

Hackers Race to Exploit Gitea Flaw That Lets Anyone Log In as Admin

A missing check in Gitea's Docker images let attackers claim any username by adding a single header. Sysdig says probing began within days of the patch.

3 min read
Vulnerabilities

Gitea Patches Unauthenticated Container Image Disclosure Flaw in 1.26.2

CVE-2026-27771 allowed anonymous pulls of private container images from all Gitea deployments prior to version 1.26.2, according to maintainers.

2 min read
© 2026 Threat Vectr