Đang tải bảng tin…
Latest Hacking News0 Hot0 bình luận4 phút đọc
Gitea Docker Vulnerability Now Under Active Probing, CVE-2026-20896
CVE-2026-20896, a critical 9.8 CVSS vulnerability in the official Gitea Docker image, is now under active exploitation just 13 days after a patch was released. The flaw stems from the Docker image's default app.ini setting REVERSE_PROXY_TRUSTED_PROXIES being set to a wildcard, allowing any attacker who can reach the container's HTTP port to impersonate any user, including admins, by forging a single X-WEBAUTH-USER header. Sysdig researchers detected the first in-the-wild probing attempt originating from a ProtonVPN exit node. With roughly 6,200 internet-facing Gitea instances indexed on Shodan, the risk is significant given that Gitea typically stores source code, CI configs, API keys, and deployment credentials. Gitea versions 1.26.3 and 1.26.4 fix this bug along with nine other issues including SSRF, branch-permission escalation, TOTP replay, and an OAuth2 reactivation flaw. Admins should update immediately, restrict REVERSE_PROXY_TRUSTED_PROXIES to the actual proxy address, and audit admin session logs.
Nguồn: https://latesthackingnews.com/2026/07/07/gitea-docker-vulnerability-exploitation. 8sync News chỉ tóm tắt và dẫn link; bản quyền nội dung thuộc tác giả và nguồn gốc.
Đề xuất cho bạn
AnduinOS38 Hot2 phútAI
Introducing AnduinOS Container: The Zero-Setup Microservice Base Image
AnduinOS Container là một base image Docker mới, được xây dựng từ đầu bằng pipeline …
