Gitea — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• Critical Unauthenticated RCE Vulnerability in LiteLLM Exploited in the Wild

  A critical command injection vulnerability, CVE-2026-42271, in LiteLLM, an open-source AI gateway, allows unauthenticated remote code execution (RCE) when chained with CVE-2026-48710, a Host header validation bypass in…

  17 articles · Updated June 9, 2026
• Anonymous Researcher Publishes Zero-Day Exploits for Major Software Projects

  An anonymous researcher known as Bikini has released exploit code for over a dozen zero-day vulnerabilities affecting 15 popular open-source projects, including the Linux kernel and Libssh2. The exploits were disclosed…

  4 articles · Updated July 1, 2026
• Gitea Docker Authentication Bypass Vulnerability Under Active Exploitation

  CVE-2026-20896 is a critical authentication bypass vulnerability (CVSS 9.8) affecting Gitea Docker images up to version 1.26.2. Discovered on July 3, 2026, the flaw allows unauthenticated remote attackers to impersonate…

  16 articles · Updated July 7, 2026
• Gitea Vulnerability Exposes 30,000 Private Container Images to Attackers

  A critical vulnerability, CVE-2026-27771, in Gitea's container registry allowed unauthenticated users to access private container images for nearly four years. Discovered by Noscope in April 2026, the flaw affects over…

  8 articles · Updated May 28, 2026
• Critical Vulnerability CVE-2026-58426 Discovered in Gitea Actions Artifacts V4

  CVE-2026-58426, published on July 3, 2026, reveals a critical vulnerability in Gitea Actions Artifacts V4. This flaw allows attackers to exploit HMAC ambiguities in signed URLs, enabling unauthorized cross-repository…

  2 articles · Updated July 5, 2026
• Vulnerabilities Discovered in Forgejo Following Carrot Disclosure

  A security researcher identified multiple vulnerabilities in Forgejo, a software platform used by Fedora, including SSRF, cryptographic issues, and authentication flaws. The researcher was able to chain these…

  2 articles · Updated April 30, 2026

Recent Intelligence Reports

• Mondoo Vulnerability Intelligence — mondoo.com · July 8, 2026
• CVE-2026-58426 - Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write Latest Vulnerabilities / 1d CVE ID : CVE-2026-58426 Published : July 3, 2026, 8:54 p.m. 3 hours, 25 minutes ago Description : Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write Severity: 0.0 NA Visit the link for more details, such as CVSS details, affected products, timeline, and mo — cvefeed.io · July 5, 2026
• CVE-2026-58426 - Exploits & Severity — Feedly · July 4, 2026
• Risky Bulletin: Researcher drops giant cache of zero — News.Risky.Biz · July 1, 2026
• Anonymous researcher dumps zero-day exploits for multiple software products — Scworld · June 30, 2026
• CVE-2026-42271 Chained with CVE-2026-48710 — horizon3.ai · June 9, 2026
• Gitea Container Vulnerability Exposes Private Container Images to Attackers — Cybersecuritynews · May 28, 2026
• CVE-2026-27771: Critical Gitea Container Registry Vulnerability Exposes Private Images to ... — Rescana · May 28, 2026

Related Entities