Vulnerability (CVE)
Researchers disclosed CVE-2026-27771 (CVSS 8.2) in Gitea, an open-source self-hosted version control platform, allowing unauthenticated remote attackers to pull private container images without an account or credentials. Noscope estimates the flaw affects...
Palo Alto Networks warned that CVE-2026-0257, a medium-severity authentication bypass in PAN-OS and Prisma Access with a CVSS score of 7.8, is under active exploitation in the wild and can be used to set up VPN connections. The flaw affects firewalls with...
An unauthenticated attacker can read any file the Gitea service account can access in versions 1.22.1 through 1.27.0 using only a public repository and crafted Org-mode markup, with no login or write access required; the flaw is tracked as CVE-2026-59774,...