News
Gitea Vulnerability Exposes Private Container Images without Authentication
2 months ago
Gitea Vulnerability Exposes Private Container Images without Authentication
By info@thehackernews.com (The Hacker News)
Cybersecurity researchers have disclosed a security flaw in Gitea, an open-source, self-hosted platform for version control, that allows unauthenticated remote attackers to pull private container images from Gitea deployments without requiring an account, password, or other credentials. The vulnerability, tracked as CVE-2026-27771 (CVSS score: 8.2), affects all versions of Gitea prior to 1.26.2
More from The Hacker News
Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic Flaws
3 hours from now
Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access
1 hour from now
Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations
6 minutes from now
SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code
26 minutes ago
ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access
1 hour ago