Red Heron Exploits Critical Gitea Flaw to Steal Repositories and Deploy Linux Rootkit
Red Heron exploited Gitea CVE-2026-60004 to steal repositories and deploy the JITTERLY backdoor and SIXZUT rootkit.
78
- Mentions · 7d0
- Mentions · 30d0
- All mentions3
- First seenAug 24, 2026
- Last mentionedSep 26, 2026
Timeline
3 articles · newest firstThree 10.0 security flaws fixed across Ubiquiti’s UniFi line
Ubiquiti patches 22 UniFi vulnerabilities, 21 rated critical including three CVSS 10.0 flaws enabling unauthorized access.
70
Weekly Update 518: IoT Doorlock Nirvana with UniFi
Troy Hunt describes building a home IoT door-lock setup around Ubiquiti UniFi hardware, relying on main power rather than batteries.
5
Related CVEs
by mentions- CVE-2026-6000424%9.8Unauthenticated RCE in Gitea via diffpatch API Git Hook Injection
- CVE-2026-77554<1%10.0Unauthenticated Command Injection in Ubiquiti UniFi Talk Application
- CVE-2026-77550<1%10.0Authentication Bypass via CRLF Injection in Ubiquiti UniFi OS
- CVE-2026-77537<1%10.0Command Injection in Ubiquiti UniFi Protect Application
Appears with
- Ubiquitivendor · 2
- Virlabsorganization · 1
- WordPressproduct · 1
- Giteavendor · 1
- Red Heronthreat actor · 1
- ZyXELproduct · 1
- CISAorganization · 1
- industrial automation organizationvictim · 1
- HestiaCPproduct · 1
- JITTERLYmalware · 1
- Acronisorganization · 1
- Giteaproduct · 1
- CyberScooporganization · 1
- SIXZUTmalware · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.