threat-intel
Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure
Critical
Summary
Threat actors have been actively probing a critical vulnerability in Gitea Docker images, exploiting a wildcard configuration that allows unauthenticated access to elevated user accounts. The vulnerability, discovered 13 days after disclosure, stems from a default setting in the Gitea Docker images that trusts any source IP address. Sysdig detected initial exploitation attempts, though no active attacks have been observed yet, highlighting the urgency of patching the affected versions.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data