authentik 2026.8 Is OpenID Certified, With a Rust Rewrite and Two Breaking Changes
authentik 2026.8 arrived on 18 August 2026 as a major release for the self-hosted identity provider. It brings official OpenID…
Category: Network & Security
-
-
Gitea CVE-2026-59774: Critical Arbitrary File Read Vulnerability
CVE-2026-59774 is a critical CVSS 9.8 vulnerability in Gitea 1.22.1–1.27.0 allowing arbitrary file read via Org-mode markup. Active exploitation confirmed.…
-
Gitea Security Update 1.27.1 Patches Two Critical Vulnerabilities
Gitea 1.27.1 fixes two security bugs, including CVE-2026-59774, a CVSS 9.8 unauthenticated file read that works against any public repository…
-
Vaultwarden 1.37.0 Patches Eight Security Advisories
Vaultwarden 1.37.0, released July 24 2026, fixes eight Medium-severity security advisories covering an icon-endpoint SSRF flaw and several cross-organization access…
-
Critical Gitea Docker Authentication Bypass Vulnerability Actively Exploited (CVE-2026-20896)
CVE-2026-20896 carries a CVSS score of 9.8, rated Critical, and it’s now being actively exploited against self-hosted Gitea instances that…
-
Self-Hosted Password Manager: Vaultwarden vs Bitwarden in 2026
An honest comparison of Vaultwarden, Bitwarden’s own self-hosted release, and KeePassXC: what actually differs, how to deploy Vaultwarden in Docker,…
