Skip to content
NewA calmer, faster ZeroHour
Vulnerabilityhigh

New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell ...

Web discovery (articles for new exploits & KEV entries) ()2
Read at thehackernews.com

Found by web discovery while looking for coverage of CVE-2026-60004

AI summary · keyword classification onlySummaries by Vani AI

New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell ...

Gitea fixes CVE-2026-60004, a 9.8 RCE that lets repository writers turn malicious patches into Git hooks and run commands.

Analyze CVE-2026-60004 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2026-60004
Tags
cve-2026-60004vulnerability

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-60004
Unauthenticated RCE in Gitea via diffpatch API Git Hook Injection
9.824%KEVPoC ×4
KEV

From the original article

Gitea fixes CVE-2026-60004, a 9. 8 RCE that lets repository writers turn malicious patches into Git hooks and run commands.

Web discovery (articles for new exploits & KEV entries)

thehackernews.com

Read the full article at Web discovery (articles for new exploits & KEV entries)

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.