Storia in 6 fonti

No fix yet for critical RCE bug in open-source Git service Gogs - exploit module is out

Researcher reported the vuln in March. Maintainers haven't responded to his messages since

Raccontata da

Confronto fonti

6 prospettive sulla stessa storia

AI · summaries

theregister.comStai leggendo1 g fa

No fix yet for critical RCE bug in open-source Git service Gogs - exploit module is out

Gogs has an unpatched CVSS 9.4 RCE exploitable by any authenticated user on default installs, 10 weeks after Rapid7's responsible disclosure with no maintainer response. A public Metasploit module makes exploitation imminent — disable open registration and rebase merging immediately or migrate to Gitea.

originale

Timeline cronologica

giovedì 28 maggio 2026·infoworld.com
Lack of response to critical vulnerability in Gogs is a reminder of the limits of open source projects
Two months after Rapid7 discovered the hole in the Git service, the project maintainer has yet to patch the bug.
giovedì 28 maggio 2026·bleepingcomputer.com
New Gogs zero-day flaw lets hackers get remote code execution
An unpatched zero-day vulnerability in the Gogs self-hosted Git service can allow attackers to gain remote code execution (RCE) on Internet-facing instances.

No fix yet for critical RCE bug in open-source Git service Gogs - exploit module is out

Confronto fonti

No fix yet for critical RCE bug in open-source Git service Gogs - exploit module is out

Timeline cronologica

Lack of response to critical vulnerability in Gogs is a reminder of the limits of open source projects

New Gogs zero-day flaw lets hackers get remote code execution

Lack of response to critical vulnerability in Gogs is a reminder of the limits of open source projects

Gogs Zero-Day Exposes Servers to Remote Code Execution

New Gogs zero-day flaw lets hackers get remote code execution

Critical Gogs RCE Vulnerability Lets Any Authenticated User Execute Arbitrary Code

Warten auf Sicherheitspatch: Self-hosted-Git-Service Gogs ist verwundbar

Critical Gogs RCE Vulnerability Lets Any Authenticated User Execute Arbitrary Code

Warten auf Sicherheitspatch: Self-hosted-Git-Service Gogs ist verwundbar

Gogs Zero-Day Exposes Servers to Remote Code Execution

No fix yet for critical RCE bug in open-source Git service Gogs - exploit module is out