Gitea RCE Exploited as Open Registration Expands Risk

CISA added a remote code execution vulnerability (CVE-2026-60004) affecting Gitea versions before 1.27.1, where open registration allows attackers to gain write access and exploit the flaw by creating repositories. Operators must upgrade to fixed releases and consider disabling open registration to reduce attack surface, while incident response should cover potential privilege misuse beyond just detecting malware payloads.

This Wire brief sits within Fusion42's coverage of Cybersecurity.