My Homelab Got Hacked - A Postmortem
6 points by colindean
6 points by colindean
I quickly found CVE-2026-60004, a recently-disclosed RCE vulnerability in Gitea, upon which Forgejo is based
This is a CVE related to gitea, I realize forgejo might be related, but I feel like this should have its own CVE for forgejo as well.
I just put up my own forgejo instance yesterday so seeing this news that their forgejo instance got popped doesn't make me feel great. As a result of this, I subscribed to the rss feed available on https://codeberg.org/forgejo/security-announcements/issues which should at least notify me of when I need to patch something.