Gitea <= 1.27.0 - Pre-Auth Remote Code Execution

Gitea versions 1.17 through 1.27.0 contain a remote code execution vulnerability in the diffpatch endpoint caused by an add/add collision that writes an executable Git hook into the bare repository's GITDIR. An attacker with write access can execute arbitrary commands as the Gitea service account...

CVE-2026-60004

creationtimestamp| type| source ---|---|--- 2026-07-29 07:59:42+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrrhfbohdx2w 2026-07-29 08:02:34+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3mrrhkep54z23 2026-07-29 09:00:07+00:00| seen|...