
CVE-2026-60004-poc-gitea
CVE-2026-60004 — Gitea Pre-Auth RCE via diffpatch hook injection
exploitationpenetration-testingreconnaissance+3
2

CVE-2026-60004 — Gitea Pre-Auth RCE via diffpatch hook injection

CVE-2026-60004 — Gitea/Forgejo Diffpatch Git Hook RCE. Bare clone → post-index-change hook injection. CVSS 9.8 | CWE-94 | Gitea < 1.27.1

CVE-2026-60004 Pre-Auth RCE Exploit — Gitea <= 1.27.0 diffpatch git hook injection (CVSS 9.8)

Proof of Concept for WatchGuard Authenticated Arbitrary File Read (CVE-2022-31749)