Skip to content
Threat Feed
Subscribe

Product

Gogs (< 0.14.3)

1 brief RSS
critical advisory

Multiple Critical Vulnerabilities in Gogs Allow Remote Code Execution and Data Compromise

Multiple critical vulnerabilities in Gogs versions prior to 0.14.3, including remote code execution (RCE) flaws (CVE-2026-52813, CVE-2026-52806) and arbitrary file write capabilities (CVE-2026-52811), enable attackers to achieve full host operating system takeover, steal proprietary source code, and facilitate lateral movement.

PoC Gogs rce path-traversal command-injection git web-application
7t 3c 10i updated