Gitea CVE-2026-60004: Critical RCE Now Under Attack

CISA added a critical Gitea vulnerability to its Known Exploited Vulnerabilities catalog on August 25, 2026, after a self-hosted instance was hit with a crypto-miner just 11 seconds after an attacker