CVE-2026-60004 | Gitea up to 1.27.0 Diffpatch API os command injection

August 26, 2026 Yanac

A vulnerability classified as critical was found in Gitea up to 1.27.0. This impacts an unknown function of the component Diffpatch API. The manipulation results in os command injection.

This vulnerability is identified as CVE-2026-60004. The attack can be executed remotely. Additionally, an exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More