Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload

CISA warned of active exploitation of a critical Gitea vulnerability, CVE-2026-60004 (CVSS 9.8), a remote code execution flaw allowing attackers with write access to execute arbitrary shell commands. The agency reported attacks dropping miner-like payloads, urging immediate patching of the recently fixed issue.