Critical Gitea RCE Actively Exploited as Reported Attack Drops MinerLike Payload

The US Cybersecurity and Infrastructure Security Agency CISA on Tuesday warned of active exploitation efforts targeting a recently patched critical security flaw impacting Gitea The vulnerability in question is CVE202660004 CVSS score 98 a case of remote code execution that allows an attacker with ordinary write access to a repository to execute arbitrary shell commands as the