Bleepingcomputer

CISA Directs Agencies to Address Gogs RCE Vulnerability Exploited in Zero-Day Attacks

First seen 12 Jan 2026, 22:44 UTC • Bleepingcomputer

•95.2

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has mandated that government agencies secure their systems against a critical Gogs vulnerability, tracked as CVE-2025-8110. This remote code execution (RCE) flaw, stemming from a path traversal weakness in the PutContents API, has been exploited in zero-day attacks, affecting systems that utilize Gogs for remote collaboration.

How this analysis works

Attack Flow

8 entities, 9 inferred relationships (STIX 2.1).

Technique (2)

Malware
Zero-day Exploit

Organization (1)

Gogs

Vulnerability (3)

CVE-2024-55947
CVE-2025-8110
Path Traversal

Tool (2)

Supershell
Supershell C2

Relationships

Supershell exploits CVE-2024-55947
Supershell exploits CVE-2025-8110
Supershell exploits Path Traversal
Supershell C2 exploits CVE-2024-55947
Supershell C2 exploits CVE-2025-8110
Supershell C2 exploits Path Traversal
CVE-2024-55947 related to Malware
CVE-2024-55947 related to Zero-day Exploit
CVE-2024-55947 related to Gogs

Continue Reading

Gogs 0-Day Vulnerability Exploited in Over 700 Instances Anonymous Researcher Publishes Zero-Day Exploits for Major Software Projects Gogs Vulnerability Allows Remote Code Execution via Path Traversal Critical Zero-Day Vulnerability in Gogs Allows Remote Code Execution Critical Vulnerabilities in Gogs and Jinjava Require Immediate Patching Dutch Authorities Dismantle 17 Million Device Botnet in Major Cybercrime Operation

CISA Directs Agencies to Address Gogs RCE Vulnerability Exploited in Zero-Day Attacks

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading