CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

← Back to feed

CVE-2026-60004

highcovered by 1 sourcefirst seen 2026-07-29
A remote, anonymous attacker can exploit a vulnerability in Gitea to execute arbitrary code.

CSIRTS triage

vendor: Giteaproduct: GiteaRemote code execution
What
A vulnerability allows a remote, anonymous attacker to execute arbitrary code.
Who is affected
Remote, anonymous users of Gitea are affected.
Urgency
Remediation is high urgency due to the potential for remote code execution.
Action
Patch Gitea to the latest version to address the vulnerability.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch CVE-2026-60004

Get an email if CVE-2026-60004 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Advisory coverage (1)

External references

NVD record for CVE-2026-60004

CVE.org record

Embed the live status

CVE-2026-60004 live status badge — this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-60004 status](https://www.csirts.com/badge/CVE-2026-60004)](https://www.csirts.com/cve/CVE-2026-60004)