Over 8,300 Gitea servers vulnerable to code execution attacks

By Sergiu Gatlan

AI Summary

Shadowserver reports over 8,300 internet-exposed Gitea instances remain unpatched against a critical flaw being actively exploited in remote code execution attacks. Organizations using self-hosted Gitea for source code management face significant supply-chain risk if attackers can execute code on these servers and access or tamper with repositories. Security teams should audit their Gitea deployments for internet exposure and apply available patches immediately.

Read full article → https://www.bleepingcomputer.com/news/security/ove…

Relevance score: 68.0/100

# More from August 30

1
PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions The Hacker News
2
Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication The Hacker News
3
OpenAI Agents Exploited Linux Kernel Flaw on Company’s Own Systems SecurityWeek
4
Shai-Hulud hackers: two men charged over TeamPCP’s global supply chain crime spree that hit OpenAI, and thousands more Graham Cluley
5
ATF Confirms Cyber Incident After Ransomware Group Claims Attack SecurityWeek
6
Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server The Hacker News
7
ServiceNow warns of three max severity security vulnerabilities BleepingComputer
9
Cosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was Vulnerable The Hacker News
10
Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth The Hacker News