Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup

An unauthenticated attacker can read any file the service account can access on Gitea, the self-hosted Git platform, in versions 1.22.1 through 1.27.0. No login, no repository write access. A public repository and crafted Org-mode markup are enough. The flaw is fixed in Gitea 1.27.1.

The file-read flaw is tracked as CVE-2026-59774, rated Critical with a CVSS score of 9.8, and received its

Source: The Hacker News

Tags:

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Bonsai 27B: A 27B-Class Model that runs on a phone

Bonsai 27B: A 27B-Class Model that runs on a phone Source: Hacker News

Read More

Attack Update: Top 5 Attack-IPs auf doode.info – 08.09.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 103.150.218.66 — 2919 requests (recent log) 89.167.35.212 — 256 requests (recent log) 103.246.0.136 — 224 requests (recent

Read More

Attack Update: Top 5 Attack-IPs auf doode.info – 01.07.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 89.167.35.212 — 107 requests (recent log) 161.97.125.94 — 38 requests (recent log) 216.73.216.215 — 33 requests (recent

Read More