Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
2 IOCs

Critical Gogs Path Traversal Flaw Enables Remote Code Execution via Git Hooks

Cyber Press
Cyber Press
Published August 29, 2026Original Report

Excerpt

A critical path traversal vulnerability in Gogs, the self-hosted Git service, could let authenticated attackers achieve remote code execution by planting malicious Git hooks outside the intended repository storage directory. Tracked as CVE-2026-52813 , the flaw arises from an API endpoint that accepted unsanitized organization usernames and passed them to a filesystem path-construction routine. Aikido researcher Jorian Woltjer reported that the issue is fixed in Gogs 0.14.3.…

Read the original report →

Indicators of Compromise

Open the mindmap →

2 indicators

TypeIndicatorConfidenceScoreFirst Seen
CVECVE-2026-52810MediumScore 51/100First seen
CVECVE-2026-52813MediumScore 51/100First seen

IOC Relationship Graph

Building graph…