CVE-2026-54901

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

July 25, 2026

Last Seen

July 25, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

GitLab Vulnerabilities Enable Remote Code Execution via Oj Parser Flaws72.6

A critical security vulnerability in GitLab has been disclosed, stemming from two long-standing memory-safety flaws in the Oj JSON parsing library. Discovered by Depthfirst's automated analysis, these flaws allow authenticated users to execute remote code on default GitLab installations. The vulnera...