Critical 9.8
CVE-2026-59774
Critical Gitea Vulnerabilities Allow RCE and File Read
Vendor / product: Gitea
Event date: 2026-07-28
Public PoC: Yes
First tracked by RiskWire: 2026-07-28
Sources & citations (5)
- Critical Gitea Vulnerability Allows Attackers to Execute Malicious Code Remotely cybersecuritynews.com · 2026-07-29
- Critical Gitea Arbitrary File Read Vulnerability Enables Remote Code Execution Attacks cybersecuritynews.com · 2026-08-04
- Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup thehackernews.com · 2026-08-05
- New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands thehackernews.com · 2026-07-29
- Critical Gitea Flaw Lets Unauthenticated Attackers Read Server Files and Execute Code gbhackers.com · 2026-08-04
References
See CVE-2026-59774 in context
RiskWire tracks every exploited CVE this week, cross-referenced against CISA KEV with federal remediation deadlines. Filtered to your vendor stack.
Book a 20-min demo →