CISA Flags Actively Exploited Gogs Vulnerability With No Patch

A high-severity Gogs vulnerability (CVE-2025-8110, CVSS 8.7) that enables symlink-based file overwrite and remote code execution is being actively exploited; researchers observed more than 700 compromised instances and Censys reports ~1,602 internet-exposed Gogs servers. CISA added the flaw to its KEV catalog, no official patch is yet widely available, and attackers have deployed Supershell C2-linked malware; immediate mitigations (disable open registration, restrict access, monitor anomalous repos/API usage) are recommended.