IT Career Blog

Gitea RCE CVE-2026-60004: Self-Hosted Git

Remote code execution vulnerability in Gitea (open-source self-hosted Git service) CVE-2026-60004 disclosed August 27, 2026. Affects self-hosted deployments. RCE allows code execution on the Gitea server - compromising source code and CI/CD credentials.