{"uuid": "2ed450d9-45b9-4769-91ec-faf5ad1ee2d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/techoverload.bsky.social/post/3mrs23ihcpb2e", "content": "Gitea RCE (CVE-2026-60004, CVSS 9.8): anyone with repo write access can plant a git hook and run shell commands as the Gitea service account. Open registration is on by default, so self-hosters\u2014update to 1.27.1 and disable open registration now. \ud83d\udd12\n\n#SelfHosting #Security #FOSS", "creation_timestamp": "2026-07-29T13:34:15.274358Z"}