Topic: gogs vulnerability

  • CISA Mandates Urgent Patch for Actively Exploited Gogs Flaw

    CISA Mandates Urgent Patch for Actively Exploited Gogs Flaw

    A critical remote code execution flaw (CVE-2025-8110) in Gogs is being actively exploited, allowing attackers to run arbitrary commands by manipulating Git configuration files. CISA has mandated all federal agencies to patch the vulnerability by February 2026, as over 1,400 public Gogs servers ar...

    Read More »
  • Unpatched Gogs Bug Actively Exploited, CISA Warns

    Unpatched Gogs Bug Actively Exploited, CISA Warns

    A critical vulnerability (CVE-2025-8110) in the Gogs platform is being actively exploited, allowing authenticated users to achieve remote code execution by overwriting files via a symbolic link flaw. Over 700 Gogs instances have already been compromised, with no official patch yet available, thou...

    Read More »