Vulnerabilities

Critical Gitea RCE Vulnerability Allows Arbitrary Shell

July 29, 2026 1 min read 5 views
cybersecurity threats news
Gitea patched a critical RCE flaw, CVE-2026-60004, that allows users with repository write access to execute shell commands as the Gitea service account by planting malicious Git hooks.

Was this article helpful?

0 found this helpful

Ready to protect your organization?

Get started with Phishlens and run your first phishing simulation today.