Tag: cve 2026 27771

Gitea Flaw Exposes Private Container Images to Unauthenticated Attacks

A newly disclosed vulnerability in Gitea, tracked as CVE-2026-27771, allows unauthenticated attackers to access private container images, potentially exposing tens of thousands of deployments worldwide. This flaw lets anyone on the internet pull private images without needing an account, password, or credentials.