CVE-2024-39933

CVSS: 7.7 High
Vector: CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:L/S:C/UI:N
Risk score: 61.6
Published: 2024-07-04
Status: Published

Gogs through 0.13.0 allows argument injection during the tagging of a new release.

Weaknesses

CWE-88

Coverage 2

vulnerability

Gogs patches critical zero-day enabling remote code execution

A critical zero-day vulnerability in Gogs, a remote collaboration platform, has been identified, allowing authenticated attackers to execute remote code and access private repositories. The flaw, present in versions up t…

BleepingComputer · Jun 8, 2026 High

CVE-2024-39933 CVE-2024-39932 CVE-2026-26194 US CN JP remote-code-execution zero-day authentication

vulnerability

New Gogs zero-day flaw lets hackers get remote code execution

A zero-day vulnerability (CVE-2024-39933) has been identified in Gogs, a self-hosted Git service, allowing authenticated attackers to execute remote code execution (RCE). The flaw, initially discovered by Jonah Burgess,…

BleepingComputer · May 28, 2026 High

CVE-2024-39933 CVE-2024-39932 CVE-2026-26194 US CN JP zero-day rce git

All articles mentioning it

news.mlab.sh

CVE-2024-39933

Weaknesses

Coverage 2

Gogs patches critical zero-day enabling remote code execution

New Gogs zero-day flaw lets hackers get remote code execution

Advisories and references