Vulnerabilities

8,300+ Gitea servers exposed to critical RCE attacks

August 28, 2026 1 min read 4 views
cybersecurity malware news
Over 8,300 internet-exposed Gitea instances remain unpatched against CVE-2026-60004, a critical code injection flaw exploited in ongoing attacks. Gitea fixed it in version 1.27.1, and CISA ordered federal agencies to patch by August 28.

Was this article helpful?

0 found this helpful

Ready to protect your organization?

Get started with Phishlens and run your first phishing simulation today.