Skip to content

25 Aug 2026

1 new, 0 updated.

New that day

highpatchedexploited 25 Aug 2026 Gitea Code Injection Vulnerability Gitea Gitea Gitea contains a code injection vulnerability that allows an attacker with repository write access to send a malicious patch to the diffpatch API endpoint to plant an executable Git hook and run shell commands as the Gitea service account. Added to CISA KEV on 2026-08-25 (federal deadline 2026-08-28). CVE-2026-600042 sources