{"uuid": "2786478c-3738-4e85-b7a7-f2517dc8a665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mtzhd5igt52r", "content": "Every self-hosted Gitea server on a version before 1.27.1 is a live target. CISA added CVE-2026-60004 to its exploited-vulnerabilities catalog on August 25 and gave federal agencies until August 28 to patch. Basic repo write access is enough to run shell commands on the server.", "creation_timestamp": "2026-08-26T23:10:13.039995Z"}