
Gitea Under Attack: Critical RCE Exploited for Cryptojacking, CISA Mandates Patch by August 28
Critical RCE in Gitea (CVE-2026-60004) is being exploited for cryptojacking. CISA requires federal agencies to patch by August 28, 2026.

Critical RCE in Gitea (CVE-2026-60004) is being exploited for cryptojacking. CISA requires federal agencies to patch by August 28, 2026.

On August 25, 2026, the Cybersecurity and Infrastructure Security Agency CISA added vulnerability CVE-2026-60004 to the Known Exploited Vulnerabilities

CISA warns of critical vulnerability in Rently Smart Home enabling PIN theft without patch. Affected versions up to 20.1.0.

CISA adds Oracle CVE-2026-21962 to KEV catalog. Critical CVSS 10.0 flaw allows unauthorized WebLogic access. Remediation due Aug 27, 2026.

CISA advisory on CVE-2026-18965: Missing authorization in PayRange API allows remote access to payment devices, risking data leaks and service disruptions.

Johnson Controls fixes medium-severity flaw CVE-2026-27875 in Simplex Incident Manager, preventing cleartext credential extraction from memory. Update recommended.

Discover how two critical vulnerabilities in the miniOrange SAML SSO plugin allow unauthorized WordPress admin access. Update your site now.

CISA mandates patch for critical Zimbra command injection vulnerability CVE-2026-73570 exploited in the wild. Update to version 10.1.20 immediately.

Microsoft publishes a registry workaround to fix Windows 11 game crashes caused by the August update KB5121003, affecting RGB drivers.