SecurityOnlineDo Son
Critical RCE flaw CVE-2026-52813 hits Gogs, patch out
Part of the CVE-2026-52813 story · since 26 Jun
Quiet for 20 weekslast report 26 Jun1 article1 outlet
- Fri 26 Jun, 03:31 UTC. SecurityOnline, first report. Critical RCE flaw CVE-2026-52813 hits Gogs, patch out. This article, 1st of 1.
The security alert highlights three critical remote code execution (RCE) vulnerabilities in Gogs, identified as CVE-2026-52813, CVE-2026-52806, and CVE-2026-52811, which have CVSS scores ranging from 9 to 10. These vulnerabilities allow attackers to exploit the self-hosted Git service through improper input validation, path traversal, and symlink manipulation. Despite the availability of patches in version 0.14.3, no confirmed exploitations have currently been reported. Users are advised to upgrade immediately to mitigate risks.
How the story developed
Quiet for 20 weekslast report 26 Jun1 article1 outlet
1 article from 1 outlet since 26 Jun. Quiet since 26 Jun. This was the first report.
- Fri 26 Jun, 03:31 UTC. SecurityOnline, first report. Critical RCE flaw CVE-2026-52813 hits Gogs, patch out. This article, 1st of 1.
- CVE not in KEV
- No CVE
- Larger: an outlet’s first report
- Coverage over time
- Quiet time, folded
Show all 1 articles as a listHide the list
- Fri 26 JunDay 01
- Critical RCE flaw CVE-2026-52813 hits Gogs, patch out03:31 · SecurityOnline · First report · This article, 1st of 1