CISA Adds Gitea Code Injection Vulnerability (CVE-2026-60004) to Known Exploited Vulnerabilities Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a Gitea code injection vulnerability, CVE-2026-60004, to its Known Exploited Vulnerabilities (KEV) Catalog, indicating active exploitation. This alert mandates federal civilian executive branch agencies to prioritize rapid remediation due to the significant risks posed by such vulnerabilities.