DanSec

Vendor

Gitea

In 9 briefs, most recently 15 September 2026. RSS for this tag

Learn more: Vulnerabilities (NVD) ↗

Known exploited (CISA KEV)

1 Gitea vulnerability is on CISA's list of vulnerabilities exploited in the wild. Most recent:

Coverage in DanSec Daily

  1. Japan Digital Agency VPN breach exposes 246,000 employees; Cisco zero-day CVE-2026-76461 under active exploitation; Red Heron and Sandworm threat activity.
  2. Hasbro breach, ATF ransomware incident and Hugging Face takeover by rogue AI agents lead; also ServiceNow and PaperCut flaws.
  3. Nutex Health data breach, over 270 Zimbra servers compromised, and Gitea RCE (CVE-2026-60004) exploited in the wild.
  4. Oracle database hack via khunt toolkit, Snowflake data theft guilty plea, and actively exploited JetBrains TeamCity RCE.
  5. ShareFile customers told to shut down storage controllers after an external threat; WP-SHELLSTORM backdoors thousands of WordPress sites; Zimbra critical flaw.
  6. Accenture breach, Ohio county extortion payment, GhostLock Linux kernel root flaw, and actively exploited Adobe ColdFusion and Gitea vulnerabilities.
  7. Adobe ColdFusion RCE exploitation, a River Bank & Trust data breach, and Armored Likho APT intrusions in Russia, Brazil and Kazakhstan.
  8. Charter and Carnival breaches by ShinyHunters, FortiClient EMS CVE-2026-35616 exploitation, and Gogs and Gitea flaws.
  9. GlassWorm botnet takedown, FBI warning on Silent Ransom Group in-person law firm attacks, and Iranian link to LA Metro cyberattack.