> TritonInfoSec News
Home / Aug 27, 2026 / Story
0
#4 The Hacker News general August 26, 2026 at 06:27 UTC

Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload

By [email protected] (The Hacker News)

AI Summary

CISA confirmed active exploitation of CVE-2026-60004 (CVSS 9.8), a critical RCE vulnerability in Gitea that allows any user with ordinary repository write access to execute arbitrary shell commands. Gitea patched the flaw in version 1.27.1 released in late July, and at least one reported attack has dropped a miner-like payload. Organizations running self-hosted Gitea instances should patch immediately or isolate from public access.

Read full article → https://thehackernews.com/2026/08/critical-gitea-r…

Relevance score: 88.0/100

# More from August 27

  1. 1
    Officials disrupt Chinese espionage operation that hit multiple federal agencies CyberScoop
  2. 2
    US takes down alleged Chinese hacking tools used against Federal Reserve, DOJ and Senate The Record
  3. 3
    CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing The Hacker News
  4. 5
    Hackers target Microsoft SharePoint RCE chain with PoC exploit BleepingComputer
  5. 6
    Three 10.0 security flaws fixed across Ubiquiti’s UniFi line CyberScoop
  6. 7
    OpenAI: Agent behavior that led to Hugging Face intrusion formed in May CyberScoop
  7. 8
    U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches The Hacker News
  8. 9
    NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions The Hacker News
  9. 10
    New GPUThor attack defeats NVIDIA ECC protection for root access BleepingComputer