importantSYS.SOURCE: The Hacker News• 2026-08-26T11:57:07+05:30

Critical Gitea RCE Vulnerability CVE-2026-60004 Actively Exploited with Cryptojacking Payload

#vulnerability #rce #cryptojacking #open-source #cybersecurity

A critical remote code execution vulnerability (CVE-2026-60004) in Gitea is actively exploited, enabling attackers to deploy cryptojacking payloads through repository write access. CISA has added the flaw to its KEV catalog, urging urgent patching of affected instances.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation efforts targeting a recently patched critical security flaw impacting Gitea.

The vulnerability in question is CVE-2026-60004 (CVSS score: 9.8), a case of remote code execution that allows an attacker with ordinary write access to a repository to execute arbitrary shell commands as the

Read original article

*** END OF TRANSMISSION ***

> RUNABLE SECURES $21M TO EXPAND AI AGENT CAPABILITIES BEYOND BUSINESS BUILDING > EPA PROPOSES RULE CHANGE TO REMOVE PUBLIC INPUT FOR DATA CENTER POLLUTION PERMITS > CLAUDE OPUS 4.6 EXPLOITS GYM BOOKING SYSTEM VULNERABILITIES IN SECURITY TESTS > THE FEELING OF POWER (ASIMOV, 1958) - DIGITAL ARCHIVE PAGE > DEBUNKING THE 'END OF PROGRAMMING' NARRATIVE AMID AI ADVANCEMENTS > AI'S ROLE IN SOFTWARE DEVELOPMENT: BEYOND CODE RECALL AND COMPETENCE ILLUSIONS > Z.AI ANNOUNCES OX ALPHA, A NEW GLM-SERIES MODEL WITH OPEN WEIGHTS RELEASE > OPENAI DISABLES RUSSIAN CHATGPT ACCOUNTS LINKED TO DISINFORMATION CAMPAIGN VIA IBI > RISE IN SOCIAL MEDIA USAGE AMONG AUSTRALIAN UNDER-16S DESPITE LEGAL RESTRICTIONS > XCORP ISSUES CEASE AND DESIST LETTERS TO XCANCEL AND NITTER, LEADING TO SERVICE DISRUPTIONS> RUNABLE SECURES $21M TO EXPAND AI AGENT CAPABILITIES BEYOND BUSINESS BUILDING > EPA PROPOSES RULE CHANGE TO REMOVE PUBLIC INPUT FOR DATA CENTER POLLUTION PERMITS > CLAUDE OPUS 4.6 EXPLOITS GYM BOOKING SYSTEM VULNERABILITIES IN SECURITY TESTS > THE FEELING OF POWER (ASIMOV, 1958) - DIGITAL ARCHIVE PAGE > DEBUNKING THE 'END OF PROGRAMMING' NARRATIVE AMID AI ADVANCEMENTS > AI'S ROLE IN SOFTWARE DEVELOPMENT: BEYOND CODE RECALL AND COMPETENCE ILLUSIONS > Z.AI ANNOUNCES OX ALPHA, A NEW GLM-SERIES MODEL WITH OPEN WEIGHTS RELEASE > OPENAI DISABLES RUSSIAN CHATGPT ACCOUNTS LINKED TO DISINFORMATION CAMPAIGN VIA IBI > RISE IN SOCIAL MEDIA USAGE AMONG AUSTRALIAN UNDER-16S DESPITE LEGAL RESTRICTIONS > XCORP ISSUES CEASE AND DESIST LETTERS TO XCANCEL AND NITTER, LEADING TO SERVICE DISRUPTIONS