Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
GitLab has released emergency patches for a critical remote code execution vulnerability, CVE-2026-97229, affecting its Community and Enterprise Editions. This flaw, stemming from an integer overflow in the CI/CD regular expression compiler, allows unauthenticated attackers to execute arbitrary code...
GitLab released emergency patches for CVE-2026-110264 on October 21, 2026, addressing a critical remote code execution vulnerability in its regular expression compiler. The flaw, which has a CVSS score of 10.0, allows unauthenticated attackers to execute arbitrary code on self-managed servers. This...
GitLab has released critical security patches for five vulnerabilities affecting versions 18.8.2, 18.7.2, and 18.6.4 of both Community Edition and Enterprise Edition. The most severe vulnerability, CVE-2026-0723, involves an unchecked return value in authentication services, enabling two-factor auth...
GitLab has patched a critical two-factor authentication bypass vulnerability, tracked as CVE-2026-0723, affecting both Community and Enterprise editions of its application development platform. The flaw allows attackers with knowledge of a target's account ID to circumvent two-factor authentication....
