CVE-2026-60004

Vendor

Gitea

Product

Gitea

CISA KEV

listed

Exposure class

Developer platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 50
   KEV CISA KEV 25 Aug 2026

   Gitea Code Injection Vulnerability

   Gitea contains a code injection vulnerability that allows an attacker with repository write access to send a malicious patch to the diffpatch API endpoint to plant an executable Git hook and run shell commands as the Gitea…

   KEV Fix available CVE-2026-60004 Gitea
2. 46
   CISA advisory CISA 25 Aug 2026

   CISA Adds One Known Exploited Vulnerability to Catalog

   CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-60004 Gitea Code Injection Vulnerability This type of vulnerability is a frequent…

   Exploited CVE-2026-60004
3. 27
   CCCS advisory CCCS 11d ago

   Gitea security advisory (AV26-845)

   CVE-2026-20896CVE-2026-60004
4. 16
   Research Insikt Group 8 Sep 2026

   August 2026 CVE Landscape

   In August 2026, Insikt Group® identified 73 high-impact vulnerabilities that should be prioritized for remediation, 43 of which had a Very Critical Recorded Future Risk Score. This represents a 14% decrease from last month.

   CVE-2025-62593CVE-2026-72898CVE-2026-9198+57 more