Multiple GitLab Vulnerabilities Enables 2FA Bypass and DoS Attacks

Cybersecuritynews •Abinaya • January 21, 2026

Critical security patches addressing five vulnerabilities across versions 18.8.2, 18.7.2, and 18.6.4 for both Community Edition (CE) and Enterprise Edition (EE). The patches resolve issues ranging from high-severity authentication flaws to denial-of-service conditions affecting core platform functionality. Critical 2FA Bypass Vulnerability The most severe vulnerability is CVE-2026-0723, an unchecked return value issue in authentication services […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

GitLab Vulnerabilities Allow 2FA Bypass and Denial-of-Service Attacks GitLab has released critical security patches for five vulnerabilities affecting versions 18.8.2, 18.7.2, and 18.6.4 of both Community Edition and Enterprise Edition. The most severe vulnerability, CVE-2026-0723, involves an unchecked return value in authentication services, enabling two-factor authentication bypass and denial-of-service conditions. 6 sources 40

Extracted Entities

Multiple GitLab Vulnerabilities Enables 2FA Bypass and DoS Attacks

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Vulnerabilities (1)