#gitea


Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries

Sep 14, 2026 // 20:01

A Chinese threat actor tracked as Red Heron has been attributed to the rapid exploitation of a recently disclosed security vulnerability in Gitea to compromise […]

Over 8,300 Gitea servers vulnerable to code execution attacks

Aug 28, 2026 // 18:57

Over 8,300 Internet-exposed Gitea instances are still unpatched against a critical security flaw exploited in ongoing remote code execution attacks, according to cybersecurity watchdog Shadowserver. […]

Hackers now exploit critical Gitea flaw in code injection attacks

Aug 26, 2026 // 14:16

Attackers are actively exploiting a critical-severity vulnerability in the Gitea self-hosted Git service, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA). Like cloud-hosted […]

Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload

Aug 26, 2026 // 11:20

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation efforts targeting a recently patched critical security flaw impacting Gitea. The […]

Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup

Aug 5, 2026 // 14:55

An unauthenticated attacker can read any file the service account can access on Gitea, the self-hosted Git platform, in versions 1.22.1 through 1.27.0. No login, […]

Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup

Aug 5, 2026 // 14:08

An unauthenticated attacker can read any file the service account can access on Gitea, the self-hosted Git platform, in versions 1.22.1 through 1.27.0. No login, […]

New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands

Jul 29, 2026 // 10:50

Gitea, the self-hosted Git platform, has patched a critical remote code execution vulnerability. A user with ordinary repository write access can turn attacker-controlled patch content […]

Hackers exploit critical auth bypass in Gitea Docker image

Jul 10, 2026 // 18:56

Hackers are actively exploiting a critical vulnerability in the official Docker image for the Gitea self-hosted Git service that allows attackers to impersonate any user, […]

Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure

Jul 6, 2026 // 19:29

Threat actors have been observed attempting to exploit a recently patched critical security flaw in Gitea Docker images, according to Sysdig. The vulnerability in question […]

Gitea Vulnerability Exposes Private Container Images without Authentication

May 27, 2026 // 13:08

Cybersecurity researchers have disclosed a security flaw in Gitea, an open-source, self-hosted platform for version control, that allows unauthenticated remote attackers to pull private container […]