NewsHive
CONTACT USANALYST PORTAL →
securityBACKGROUND

Over 8,300 Gitea servers vulnerable to code execution attacks

BACKGROUND
1 SIGNALFIRST DETECTED 28 August 2026
Narrative synthesis pending — 1 signal collected.
How the story developed
Other feeds and industry voices
1 Sept
Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure

Threat actors are exploiting a newly patched critical security flaw impacting JFrog Artifactory merely days after public disclosure, according to watchTowr. The vulnerability in

REPORT · HOW · The Hacker NewsOPEN STORY
26 Aug
Hackers now exploit critical Gitea flaw in code injection attacks

Attackers are now exploiting a critical-severity vulnerability in the Gitea self-hosted Git service, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA).

REPORT · HOW · BleepingComputerOPEN STORY
28 May
New Gogs zero-day flaw lets hackers get remote code execution

An unpatched zero-day vulnerability in the Gogs self-hosted Git service can allow attackers to gain remote code execution (RCE) on Internet-facing instances. [...]

REPORT · WHAT · BleepingComputerOPEN STORY
29 Jul
New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands

Gitea, the self-hosted Git platform, has patched a critical remote code execution vulnerability. A user with ordinary repository write access can turn attacker-controlled patch

REPORT · HOW · The Hacker NewsOPEN STORY
14 Sept
Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries

A Chinese threat actor tracked as Red Heron has been attributed to the rapid exploitation of a recently disclosed security vulnerability in Gitea to compromise internet-facing

REPORT · WHO · The Hacker NewsOPEN STORY
1 Sept
Nearly 22,000 Microsoft Exchange servers vulnerable to hijack attacks

Nearly 22,000 Microsoft Exchange servers exposed online remain unpatched against a high-severity authentication bypass vulnerability that allows attackers to hijack all user

REPORT · WHAT · BleepingComputerOPEN STORY
28 May
Critical Gogs RCE Vulnerability Lets Any Authenticated User Execute Arbitrary Code

A critical security vulnerability has been disclosed in Gogs, a popular open-source self-hosted Git service, that allows an authenticated user to execute arbitrary code under

REPORT · WHAT · The Hacker NewsOPEN STORY
Sources
BleepingComputer

NewsHive monitors these sources continuously. All signal titles above link to the original reporting.

Intelligence by NewsHive. Need help navigating what this means for your business? Contact GeekyBee →