Exploit for CVE-2026-60004

githubexploit · 2026-08-08

Description

Gitea pre-authentication remote code execution via diffpatch hook injection.

Entry point

Parametercontent · request body

Path/api/v1/repos/{owner}/{repo}/diffpatch

Diffpatch endpoint used to apply patches which can lead to creation of a hook and remote code execution

All known vulnerabilities by product

CVSS 5.2 for CVE-2026-60004

5.2

MEDIUM SEVERITY

Version NONE

VectorNONE

Working code

79%confidence this exploit runs

Based on 1 file(s) in the source

CVE Information

Exploit Details

Modified:2026-08-08 13:08

Last Seen:2026-08-08 13:20

Reporter:gagaltotal

Last commit:2026-08-08

Tags

giteadiffpatch hookpre authenticationremote code execution

Other exploits for CVE-2026-60004

Exploit for CVE-2026-60004

2026-08-04 HackSpeakGITHUB

Exploit for CVE-2026-60004

2026-08-04 SachinartGITHUB

Exploit for CVE-2026-60004

2026-08-03 imbas007GITHUB

Exploit for CVE-2026-60004

2026-08-03 shinthinkGITHUB

Exploit for CVE-2026-60004

2026-07-30 EQSTLabGITHUB

Exploit for CVE-2026-60004

2026-07-30 0xBlackashGITHUB

Exploit for CVE-2026-60004

2026-07-29 HORKimhabGITHUB

Exploit Code

README3 lines

## https://sploitus.com/exploit?id=A8BE661C-6C27-5B8F-B009-FE0656507197
# CVE-2026-60004-poc-gitea
CVE-2026-60004 — Gitea Pre-Auth RCE via diffpatch hook injection