DossierENTITY

CVSS score 9.8

Coverage of CVSS score 9.8 in the Nexus archive.

Earliest in view: Aug 5 · 11:04 UTCMost recent: Aug 5 · 11:04 UTC

Co-mentioned in this coverage

Recent coverage

SECURITYAug 5 · 11:04 UTCTHE HACKER NEWS
Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup
An unauthenticated attacker could exploit a critical flaw in Gitea versions 1.22.1 through 1.27.0 to read any file accessible by the service account. The vulnerability, tracked as CVE-2026-59774, requires only a public repository and crafted Org-mode markup. The issue was fixed in Gitea 1.27.1.