8,300+ Gitea servers exposed to critical RCE attacks
August 28, 2026
1 min read
4 views
cybersecurity
malware
news
Over 8,300 internet-exposed Gitea instances remain unpatched against CVE-2026-60004, a critical code injection flaw exploited in ongoing attacks. Gitea fixed it in version 1.27.1, and CISA ordered federal agencies to patch by August 28.
Was this article helpful?
0 found this helpful