# Network & Security, News

Published articles for Network & Security, News.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Gitea v1.27.3 Ships 18 Security Hardening Fixes

DevFeed: [Gitea v1.27.3 Ships 18 Security Hardening Fixes](<https://devfeed.tech/articles/gitea-v1-27-3-ships-18-security-hardening-fixes-10720.md>)

Original publisher: [Read original article](<https://selfhostlab.io/gitea-1-27-3-security-hardening/>)

Author: Christian Rakoot

Published: 2026-09-01T06:31:36Z

Content type: article

Language: en

Sources: [Self Host Lab](<https://devfeed.tech/sources/self-host-lab.md>)

Topics: [Gitea](<https://devfeed.tech/topics/gitea.md>), [Security](<https://devfeed.tech/topics/security.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [API](<https://devfeed.tech/topics/api.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Pull Request](<https://devfeed.tech/topics/pull-request.md>), [GitHub](<https://devfeed.tech/topics/github.md>), [GitLab](<https://devfeed.tech/topics/gitlab.md>), [Maven](<https://devfeed.tech/topics/maven.md>), [Swift](<https://devfeed.tech/topics/swift.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [changelog](<https://devfeed.tech/tags/changelog.md>), [code](<https://devfeed.tech/tags/code.md>), [git](<https://devfeed.tech/tags/git.md>), [gitea-v1-27-3-ships](<https://devfeed.tech/tags/gitea-v1-27-3-ships.md>), [github](<https://devfeed.tech/tags/github.md>), [maintainers](<https://devfeed.tech/tags/maintainers.md>), [network-security](<https://devfeed.tech/tags/network-security.md>), [network-security-news](<https://devfeed.tech/tags/network-security-news.md>), [news](<https://devfeed.tech/tags/news.md>), [pull-requests](<https://devfeed.tech/tags/pull-requests.md>), [release](<https://devfeed.tech/tags/release.md>), [security](<https://devfeed.tech/tags/security.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

### AI overview

Gitea v1.27.3 introduces 18 security hardening fixes focused primarily on access control. The release narrows package and API-token access, restricts repository and attachment exposure, strengthens pull-request and artifact trust boundaries, and limits several migration and metadata inputs. It follows earlier Gitea releases that addressed numbered vulnerabilities, but these fixes do not carry dedicated CVE identifiers.

### Source excerpt

Gitea v1.27.3 landed August 29, 2026 with an unusually long SECURITY section: 18 separate access-control hardening fixes, none carrying a CVE identifier. The changes tighten package API scope, attachment paths, repository enumeration, and more. It's the third Gitea security story here in three weeks, following the CVE-2026-59774/60004 patches and CISA's active-exploitation confirmation. Update on your normal schedule.

## Gitea RCE Flaw Now Under Active Exploitation, CISA Confirms

DevFeed: [Gitea RCE Flaw Now Under Active Exploitation, CISA Confirms](<https://devfeed.tech/articles/gitea-rce-flaw-now-under-active-exploitation-cisa-confirms-10721.md>)

Original publisher: [Read original article](<https://selfhostlab.io/gitea-rce-active-exploitation/>)

Author: Christian Rakoot

Published: 2026-08-29T06:33:49Z

Content type: news

Language: en

Sources: [Self Host Lab](<https://devfeed.tech/sources/self-host-lab.md>)

Topics: [Gitea](<https://devfeed.tech/topics/gitea.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Security](<https://devfeed.tech/topics/security.md>), [incident](<https://devfeed.tech/topics/incident.md>), [Cryptocurrency](<https://devfeed.tech/topics/cryptocurrency.md>), [Docker Container](<https://devfeed.tech/topics/docker-container.md>)

Tags: [cryptocurrency](<https://devfeed.tech/tags/cryptocurrency.md>), [docker-container](<https://devfeed.tech/tags/docker-container.md>), [gitea-rce](<https://devfeed.tech/tags/gitea-rce.md>), [hosting](<https://devfeed.tech/tags/hosting.md>), [incident](<https://devfeed.tech/tags/incident.md>), [network-security](<https://devfeed.tech/tags/network-security.md>), [network-security-news](<https://devfeed.tech/tags/network-security-news.md>), [news](<https://devfeed.tech/tags/news.md>), [security](<https://devfeed.tech/tags/security.md>), [self-hosted](<https://devfeed.tech/tags/self-hosted.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

### AI overview

CISA confirmed that the critical Gitea vulnerability CVE-2026-60004 is being actively exploited and added it to the Known Exploited Vulnerabilities catalog. The article explains the exploit through Gitea's diffpatch API, which can enable arbitrary code execution, and describes a documented compromise of an outdated self-hosted instance that led to cryptocurrency mining inside a Docker container.

### Source excerpt

CISA has added CVE-2026-60004, the critical Gitea RCE flaw patched in version 1.27.1, to its Known Exploited Vulnerabilities catalog, confirming active exploitation in the wild. Help Net Security documented a real compromise: an outdated instance with open registration hit by an automated scanner, ending in a cryptocurrency-mining payload. Here is what changed and how to patch.