Critical Gitea Docker Bug Under Active Exploitation Exposes Repositories and Secrets
2026-07-08T02:51:44Z•d3188bf7a90826afd59c9e337e9423c2a88a86b3b48d0d9c09deabef9a27adb4
AI agentsAI-generated malwareAdobe ColdFusionArmored LikhoBad EpollCVE-2026-11405CVE-2026-20896CVE-2026-46242CVE-2026-48282DockerFatFsGiteaIoT vulnerabilitiesJanuscapeKVMLinux kernelMedtronicShinyHuntersTendaVM escapeauthentication bypassdata breachhacktivismprompt injectionrouter backdoor
What happened
Multiple high-severity incidents and vulnerabilities reported: attackers are actively exploiting a critical Gitea Docker authentication-bypass (CVE-2026-20896, CVSS 9.8) affecting official images prior to 1.26.3; Adobe ColdFusion remote code execution (CVE-2026-48282) is being exploited in the wild against unpatched servers; and a Linux kernel epoll local privilege-escalation (Bad Epoll, CVE-2026-46242) can yield root on Linux and Android. CERT/CC disclosed an undocumented backdoor in multiple Tenda router firmwares (CVE-2026-11405) that grants full admin access with a hidden password and has,
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- d3188bf7a90826afd59c9e337e9423c2a88a86b3b48d0d9c09deabef9a27adb4
- Enrichment time
- 2026-07-08T02:51:44Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.