New Gogs zero-day flaw lets hackers get remote code execution (opens in new tab)

Covers Authenticated RCE via Argument Injection in Gogs (NOT FIXED)Covered by kylereddoch.me

An unpatched zero-day vulnerability in the Gogs self-hosted Git service can allow attackers to gain remote code execution (RCE) on Internet-facing instances. [...]

Read the original article

Sign in to keep reading the full article.

Sign Up Log In

Covered in 1 article

kylereddoch.me·

Covered in 1 article

Security Signal Weekly: May 23-29, 2026