Heise.De GitLab Vulnerabilities Allow 2FA Bypass and Denial-of-Service Attacks
Article Content
Browse articles 
GitLab has released critical security patches for five vulnerabilities affecting versions 18.8.2, 18.7.2, and 18.6.4 of both Community Edition and Enterprise Edition. The most severe vulnerability, CVE-2026-0723, involves an unchecked return value in authentication services, enabling two-factor authentication bypass and denial-of-service conditions.
Ask AI about this cluster
Answers cite the sources they use
Updated 237d ago How this analysis works
More articles in this cluster (6)
Following this threat?
Track CVE-2026-0723 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
GitLab Issues Emergency Patch for Critical RCE Vulnerability GitLab has released emergency patches for a critical remote code execution vulnerability, CVE-2026-97229, affecting its Community and Enterprise Editions. This flaw, stemming from an integer overflow in the CI/CD regular expression compiler, allows unauthenticated attackers to execute arbitrary code via specially… 
GitLab CVE-2026-110264: Critical RCE Flaw Patched GitLab released emergency patches for CVE-2026-110264 on October 21, 2026, addressing a critical remote code execution vulnerability in its regular expression compiler. The flaw, which has a CVSS score of 10.0, allows unauthenticated attackers to execute arbitrary code on self-managed servers. This vulnerability…