Back to the CVE list
CVE-2026-60004 CISA KEV · Actively exploited

Code injection in Gitea

CVSS score

9.8

EPSS probability

%24.0

Risk score

4.7

Published

1 mo ago

OverviewPublic Exploits (16)NewsroomVulnerability Timeline

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

Security.NL28.08.2026

Ruim achtduizend Gitea-servers bevatten actief misbruikt beveiligingslek

Op internet zijn ruim achtduizend Gitea-servers te vinden, waaronder meer dan tweehonderd in Nederland, die een actief ...

Read the full story

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-60004"