Gitea RCE Flaw Now Under Active Exploitation, CISA Confirms
CISA has added CVE-2026-60004, the critical Gitea RCE flaw patched in version 1.27.1, to its Known Exploited Vulnerabilities catalog, confirming…
Category: Homelab
Homelab guides for beginners and tinkerers: hardware picks, Proxmox, TrueNAS, Unraid, Docker, networking and backups for a server you run at home.
Portainer Docker 2.45.0 LTS Fixes a Critical Proxy Bypass
Portainer 2.45.0 LTS landed on August 27, rolling up the 2.40-2.44 STS releases into a new Long Term Support base.…
authentik 2026.8 Is OpenID Certified, With a Rust Rewrite and Two Breaking Changes
authentik 2026.8 arrived on 18 August 2026 as a major release for the self-hosted identity provider. It brings official OpenID…
Grafana 13.2.0 Is Both a Security Fix and a Feature Release
Grafana 13.2.0 arrived on 18 August 2026 carrying two separate stories: a High-severity authorization flaw in Unified Alerting, tracked as…
RAM Prices Are Up 500% in a Year, and Home Server Builds Are Paying for It
DDR5 kits are selling for roughly five times last year’s price, and a 128GB kit that once bottomed out at…
Unraid 8 Announced: Fedora Base, Native Docker Compose, and Built-In Backups
Lime Technology has announced Unraid 8, moving the OS off Slackware onto Fedora and uCore, adding native Docker Compose inside…
ESPHome 2026.8 Takes BLE Beyond the ESP32 and Turns the Pico W Into a Bluetooth Proxy
ESPHome 2026.8.0 moves BLE support out of the ESP32-only world: 39 BLE sensor platforms now run on the Raspberry Pi…
Portainer Update 2.39.6 LTS Adds SSRF Protection and a Swarm Path Traversal Fix
Portainer 2.39.6 LTS landed on August 12 with a configurable SSRF allowlist that runs in off, audit, or enforce mode,…
Gitea CVE-2026-59774: Critical Arbitrary File Read Vulnerability
CVE-2026-59774 is a critical CVSS 9.8 vulnerability in Gitea 1.22.1–1.27.0 allowing arbitrary file read via Org-mode markup. Active exploitation confirmed.…
Gitea Security Update 1.27.1 Patches Two Critical Vulnerabilities
Gitea 1.27.1 fixes two security bugs, including CVE-2026-59774, a CVSS 9.8 unauthenticated file read that works against any public repository…
