sign in--:--:--UTC

CVE-2026-60004

exploited in the wild☆ pin

CVSS

9.8

Reports

4

First seen

Jul 29, 2026

Last seen

Aug 25, 2026

Affected product

Gitea

Recent reports

Gitea Security Advisory (AV26-845)

Canadian Centre AlertsAug 25, 2026 High

CISA Adds Gitea Code Injection Vulnerability to Known Exploited Vulnerabilities Catalog

CISA AdvisoriesAug 25, 2026 Critical

Critical Gitea Flaw Allows Unauthenticated File Read via Org-Mode Markup

The Hacker NewsAug 5, 2026 Critical

Gitea RCE Vulnerability CVE-2026-60004 Allows Repository Writers to Execute Shell Commands

The Hacker NewsJul 29, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans