https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 27 Aug 2026 16:41:27 +0000 https://vulnerability.circl.lu/sighting/d23279f2-baba-4b02-b520-0ca018e16c6a/export {"uuid": "d23279f2-baba-4b02-b520-0ca018e16c6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mu2tuit2or2k", "content": "Critical Gitea vulnerability now exploited in the wild (CVE-2026-60004) #appsec", "creation_timestamp": "2026-08-27T12:27:19.816668Z"} {"uuid": "d23279f2-baba-4b02-b520-0ca018e16c6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mu2tuit2or2k", "content": "Critical Gitea vulnerability now exploited in the wild (CVE-2026-60004) #appsec", "creation_timestamp": "2026-08-27T12:27:19.816668Z"} https://vulnerability.circl.lu/sighting/d23279f2-baba-4b02-b520-0ca018e16c6a/export Thu, 27 Aug 2026 12:27:19 +0000 https://vulnerability.circl.lu/sighting/8d0934a9-fcea-4e0e-8bb2-6e9d3a9e8c21/export {"uuid": "8d0934a9-fcea-4e0e-8bb2-6e9d3a9e8c21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mu2sutcdic2h", "content": "\u3010\u7dca\u6025\u3011Gitea \u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\uff08CVE-2026-60004 / CVSS 9.8 CRITICAL\uff09\n\n\u81ea\u5df1\u30db\u30b9\u30c8\u578bGit\u30b5\u30fc\u30d3\u30b9\u306e1.17\u301c1.27.0\u304c\u5bfe\u8c61\u3067\u3059\u3002diffpatch API\u304b\u3089\u5b9f\u884c\u53ef\u80fd\u306aGit\u30d5\u30c3\u30af\u3092\u4ed5\u8fbc\u307e\u308c\u3001Gitea\u306e\u30b5\u30fc\u30d3\u30b9\u30a2\u30ab\u30a6\u30f3\u30c8\u6a29\u9650\u3067\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3055\u308c\u307e\u3059\u3002CISA\u304c8\u670825\u65e5\u306bKEV\u3078\u8ffd\u52a0\u3001\u662f\u6b63\u671f\u9650\u306f8\u670828\u65e5\u3002\n\u5bfe\u51e6: 1.27.1\u3078\u66f4\u65b0\u3057\u3066\u304f\u3060\u3055\u3044\u3002\u516c\u5f0f\u306e\u56de\u907f\u7b56\u306f\u3042\u308a\u307e\u305b\u3093\u3002\n\nforsmile.jp/articles/git...\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "creation_timestamp": "2026-08-27T12:09:37.682750Z"} {"uuid": "8d0934a9-fcea-4e0e-8bb2-6e9d3a9e8c21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mu2sutcdic2h", "content": "\u3010\u7dca\u6025\u3011Gitea \u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\uff08CVE-2026-60004 / CVSS 9.8 CRITICAL\uff09\n\n\u81ea\u5df1\u30db\u30b9\u30c8\u578bGit\u30b5\u30fc\u30d3\u30b9\u306e1.17\u301c1.27.0\u304c\u5bfe\u8c61\u3067\u3059\u3002diffpatch API\u304b\u3089\u5b9f\u884c\u53ef\u80fd\u306aGit\u30d5\u30c3\u30af\u3092\u4ed5\u8fbc\u307e\u308c\u3001Gitea\u306e\u30b5\u30fc\u30d3\u30b9\u30a2\u30ab\u30a6\u30f3\u30c8\u6a29\u9650\u3067\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3055\u308c\u307e\u3059\u3002CISA\u304c8\u670825\u65e5\u306bKEV\u3078\u8ffd\u52a0\u3001\u662f\u6b63\u671f\u9650\u306f8\u670828\u65e5\u3002\n\u5bfe\u51e6: 1.27.1\u3078\u66f4\u65b0\u3057\u3066\u304f\u3060\u3055\u3044\u3002\u516c\u5f0f\u306e\u56de\u907f\u7b56\u306f\u3042\u308a\u307e\u305b\u3093\u3002\n\nforsmile.jp/articles/git...\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "creation_timestamp": "2026-08-27T12:09:37.682750Z"} https://vulnerability.circl.lu/sighting/8d0934a9-fcea-4e0e-8bb2-6e9d3a9e8c21/export Thu, 27 Aug 2026 12:09:37 +0000 https://vulnerability.circl.lu/sighting/f9df29db-426b-4150-8bdd-d22589ab5049/export {"uuid": "f9df29db-426b-4150-8bdd-d22589ab5049", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/qhr7w023-vn7u1_ejg3FfnGZ1vCO9Tv-EvHPiDFbLb3J-JQ", "content": "", "creation_timestamp": "2026-08-27T12:00:09.782608Z"} {"uuid": "f9df29db-426b-4150-8bdd-d22589ab5049", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/qhr7w023-vn7u1_ejg3FfnGZ1vCO9Tv-EvHPiDFbLb3J-JQ", "content": "", "creation_timestamp": "2026-08-27T12:00:09.782608Z"} https://vulnerability.circl.lu/sighting/f9df29db-426b-4150-8bdd-d22589ab5049/export Thu, 27 Aug 2026 12:00:09 +0000 https://vulnerability.circl.lu/sighting/828bdd59-b2e5-4e9e-a317-beff40159ef6/export {"uuid": "828bdd59-b2e5-4e9e-a317-beff40159ef6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/3_PCmixRZKD616mGgxZ7XjOgGlkrPu2pELMCZYyqXilYjQ", "content": "", "creation_timestamp": "2026-08-27T08:00:05.823918Z"} {"uuid": "828bdd59-b2e5-4e9e-a317-beff40159ef6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/3_PCmixRZKD616mGgxZ7XjOgGlkrPu2pELMCZYyqXilYjQ", "content": "", "creation_timestamp": "2026-08-27T08:00:05.823918Z"} https://vulnerability.circl.lu/sighting/828bdd59-b2e5-4e9e-a317-beff40159ef6/export Thu, 27 Aug 2026 08:00:05 +0000 https://vulnerability.circl.lu/sighting/f36760e3-3d4f-43a0-95dd-ca8beeff9fd1/export {"uuid": "f36760e3-3d4f-43a0-95dd-ca8beeff9fd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60004", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mu262bm7fh2w", "content": "\ud83d\udcf0 Peretas Aktif Eksploitasi Celah Kritis Gitea untuk Serangan Injeksi Kode dan Malware Mining\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/08/27/peretas-eksploitasi-celah-kritis-gitea-dalam-serangan-injeksi-kode/\n\n#cisaKev #codeInjection #cryptomining #cve-2026-60004 #devops #gi", "creation_timestamp": "2026-08-27T05:56:50.866288Z"} {"uuid": "f36760e3-3d4f-43a0-95dd-ca8beeff9fd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60004", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mu262bm7fh2w", "content": "\ud83d\udcf0 Peretas Aktif Eksploitasi Celah Kritis Gitea untuk Serangan Injeksi Kode dan Malware Mining\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/08/27/peretas-eksploitasi-celah-kritis-gitea-dalam-serangan-injeksi-kode/\n\n#cisaKev #codeInjection #cryptomining #cve-2026-60004 #devops #gi", "creation_timestamp": "2026-08-27T05:56:50.866288Z"} https://vulnerability.circl.lu/sighting/f36760e3-3d4f-43a0-95dd-ca8beeff9fd1/export Thu, 27 Aug 2026 05:56:50 +0000 https://vulnerability.circl.lu/sighting/bb53c5b4-89dd-4639-b639-d1d4ecb8f4e6/export {"uuid": "bb53c5b4-89dd-4639-b639-d1d4ecb8f4e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mu24n5wnpc2q", "content": "Critical Gitea vulnerability now exploited in the wild (CVE-2026-60004)\n\nAttackers have begun exploiting CVE-2026-60004, a critical code injection vulnerability in the Gitea Git platform, CISA confirmed on Tuesday by adding the vulnerability to its Known Exploited Vulnerabilities \u2026\n#hackernews #news", "creation_timestamp": "2026-08-27T05:31:37.569511Z"} {"uuid": "bb53c5b4-89dd-4639-b639-d1d4ecb8f4e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mu24n5wnpc2q", "content": "Critical Gitea vulnerability now exploited in the wild (CVE-2026-60004)\n\nAttackers have begun exploiting CVE-2026-60004, a critical code injection vulnerability in the Gitea Git platform, CISA confirmed on Tuesday by adding the vulnerability to its Known Exploited Vulnerabilities \u2026\n#hackernews #news", "creation_timestamp": "2026-08-27T05:31:37.569511Z"} https://vulnerability.circl.lu/sighting/bb53c5b4-89dd-4639-b639-d1d4ecb8f4e6/export Thu, 27 Aug 2026 05:31:37 +0000 https://vulnerability.circl.lu/sighting/4ad78d88-6bd9-41e2-93e8-4496599b84af/export {"uuid": "4ad78d88-6bd9-41e2-93e8-4496599b84af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu22pqrkhk2m", "content": "\ud83d\udea8 CVE-2026-60004 \u2014 Gitea RCE actively exploited\n\nPublic PoC available, real-world attacks confirmed, and CISA has added it to KEV. Fixed in Gitea 1.27.1.\n\nstemshop.top/blog/cve-202...\n\n#CVE #Gitea #RCE #CyberSecurity #InfoSec #CISA", "creation_timestamp": "2026-08-27T04:57:23.987713Z"} {"uuid": "4ad78d88-6bd9-41e2-93e8-4496599b84af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu22pqrkhk2m", "content": "\ud83d\udea8 CVE-2026-60004 \u2014 Gitea RCE actively exploited\n\nPublic PoC available, real-world attacks confirmed, and CISA has added it to KEV. Fixed in Gitea 1.27.1.\n\nstemshop.top/blog/cve-202...\n\n#CVE #Gitea #RCE #CyberSecurity #InfoSec #CISA", "creation_timestamp": "2026-08-27T04:57:23.987713Z"} https://vulnerability.circl.lu/sighting/4ad78d88-6bd9-41e2-93e8-4496599b84af/export Thu, 27 Aug 2026 04:57:23 +0000 https://vulnerability.circl.lu/sighting/d122e766-723e-44fb-b124-a8974de6d4af/export {"uuid": "d122e766-723e-44fb-b124-a8974de6d4af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mtzv2sz7dc2o", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned of active exploitation of a critical RCE vulnerability in Gitea (CVE-2026-60004, CVSS 9.8). This flaw allows attackers with repository write access to execute arbitrary commands. It affects all versions prior to 1.27.1.", "creation_timestamp": "2026-08-27T03:16:06.627354Z"} {"uuid": "d122e766-723e-44fb-b124-a8974de6d4af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mtzv2sz7dc2o", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned of active exploitation of a critical RCE vulnerability in Gitea (CVE-2026-60004, CVSS 9.8). This flaw allows attackers with repository write access to execute arbitrary commands. It affects all versions prior to 1.27.1.", "creation_timestamp": "2026-08-27T03:16:06.627354Z"} https://vulnerability.circl.lu/sighting/d122e766-723e-44fb-b124-a8974de6d4af/export Thu, 27 Aug 2026 03:16:06 +0000 https://vulnerability.circl.lu/sighting/28195423-5273-4be2-a7f3-eb6ee76b1417/export {"uuid": "28195423-5273-4be2-a7f3-eb6ee76b1417", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mtzooxgxa52o", "content": "Gitea\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u304c\u5b9f\u969b\u306b\u60aa\u7528\u3055\u308c\u308b\uff08CVE-2026-60004\uff09 \n\nCritical Gitea vulnerability now exploited in the wild (CVE-2026-60004) #HelpNetSecurity (Aug 26)\n\nwww.helpnetsecurity.com/2026/08/26/g...", "creation_timestamp": "2026-08-27T01:22:05.868627Z"} {"uuid": "28195423-5273-4be2-a7f3-eb6ee76b1417", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mtzooxgxa52o", "content": "Gitea\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u304c\u5b9f\u969b\u306b\u60aa\u7528\u3055\u308c\u308b\uff08CVE-2026-60004\uff09 \n\nCritical Gitea vulnerability now exploited in the wild (CVE-2026-60004) #HelpNetSecurity (Aug 26)\n\nwww.helpnetsecurity.com/2026/08/26/g...", "creation_timestamp": "2026-08-27T01:22:05.868627Z"} https://vulnerability.circl.lu/sighting/28195423-5273-4be2-a7f3-eb6ee76b1417/export Thu, 27 Aug 2026 01:22:05 +0000 https://vulnerability.circl.lu/sighting/ba96bfd4-4ad9-48ce-89e6-608b788c748a/export {"uuid": "ba96bfd4-4ad9-48ce-89e6-608b788c748a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://thehackernews.com/2026/08/critical-gitea-rce-actively-exploited.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation efforts targeting a recently patched critical security flaw impacting Gitea.\n\nThe vulnerability in question is CVE-2026-60004 (CVSS score: 9.8), a case of remote code execution that allows an attacker with ordinary write access to a repository to execute arbitrary shell commands as the", "creation_timestamp": "2026-08-27T01:00:32.597316Z"} {"uuid": "ba96bfd4-4ad9-48ce-89e6-608b788c748a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://thehackernews.com/2026/08/critical-gitea-rce-actively-exploited.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation efforts targeting a recently patched critical security flaw impacting Gitea.\n\nThe vulnerability in question is CVE-2026-60004 (CVSS score: 9.8), a case of remote code execution that allows an attacker with ordinary write access to a repository to execute arbitrary shell commands as the", "creation_timestamp": "2026-08-27T01:00:32.597316Z"} https://vulnerability.circl.lu/sighting/ba96bfd4-4ad9-48ce-89e6-608b788c748a/export Thu, 27 Aug 2026 01:00:32 +0000