Gogs
In 5 briefs, most recently 9 June 2026. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Known exploited (CISA KEV)
1 Gogs vulnerability is on CISA's list of vulnerabilities exploited in the wild. Most recent:
- CVE-2025-8110 Gogs Path Traversal Vulnerability
Coverage in DanSec Daily
- The Check Point VPN zero-day exploited by Qilin, the NSO Group WhatsApp spear-phishing campaign, and a SoFi subsidiary breach affecting customer data.
- Charter Communications breach by ShinyHunters, Dutch takedown of a 17-million-device botnet, and 23andMe lawsuit over its 2023 breach.
- Charter and Carnival breaches by ShinyHunters, FortiClient EMS CVE-2026-35616 exploitation, and Gogs and Gitea flaws.
- Hackers selling Target source code, the n8n "Ni8mare" flaw hitting about 60,000 instances, and a Gogs zero-day under a CISA patch order.
- The Gogs zero-day hitting 700+ servers, the LastPass £1.2M ICO fine, Gladinet CentreStack exploitation, and WIRTE's AshTag malware campaign.