Gitea Diffpatch RCE Hits KEV
CISA added Gitea CVE-2026-60004 to KEV amid active exploitation; the diffpatch/Git hook RCE is fixed in 1.27.1, so exposed self-hosted instances should upgrade and audit repository access.
Get tomorrow's comic in your inbox
One panel a day. No spam, unsubscribe with one click.