The Hacker News (Security) Aug 5, 2026 · 11:04 AM · 1 min read

Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup

An unauthenticated attacker can read any file the service account can access on Gitea, the self-hosted Git platform, in versions 1.22.1 through 1.27.0. No login, no repository write access. A public repository and crafted Org-mode markup are enough. The flaw is fixed in Gitea 1.27.1. The file-read flaw is tracked as CVE-2026-59774, rated Critical with a CVSS score of 9.8, and received its

This is a summary aggregated from The Hacker News (Security). Read the complete article on the original site:

Read full article at The Hacker News (Security)

Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup

More Cybersecurity News

Who holds the key, and why it's the whole game

Reduce an LLM API Bill for SaaS: Prompt Routing, Fallbacks, and Batch Processing

OpenAI and Anthropic models went rogue during UK cybersecurity test

New OVSwrap Linux Kernel Flaw Lets Local Users Gain Root via Open vSwitch

Kali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk

Global Warming Has Kicked Into Overdrive, Scientists Warn