CVE-2026-60004

Critical Gitea Git Diffpatch Code Injection Vulnerability CVE-2026-60004 Added to CISA Exploited Catalog

CISA issues binding remediation directive on CVE-2026-60004, a critical code injection defect in Gitea's git diffpatch parser enabling remote command execution on self-hosted repositories.