Red Hat Consulting GitLab breached: ~800 customer engagement reports stolen
Teaser from the source
The Crimson Collective broke into a self-managed GitLab instance used by Red Hat Consulting and claimed about 570 GB from 28,000 repos, including roughly 800 Customer Engagement Reports with infrastructure, config and credential details. Red Hat confirmed the access and said its products, supply chain and hosted services were not affected. ShinyHunters later joined the extortion.
This is the RSS-feed teaser. Read the full article at the original source.
Read at pwn.watchMore on GitLab
Other advisories
- CriticalCVE-2026-97229Integer Overflow or Wraparound in GitLab
- CriticalCVE-2026-110264Integer Overflow or Wraparound in GitLab
- CriticalCVE-2026-110264Ruby 4.0.9, 3.4.12 and 3.3.13 fix Regexp compiler memory bugs behind GitLab's CVSS 10 RCEs
- Not ratedosv:CVE-2022-51026Bytebase 0.12.0 before 1.0.1 Authentication Bypass via GitLab Self-Hosted Login
- CriticalCVE-2026-110264GitLab: Mehrere Schwachstellen
- MediumCVE-2026-16255GitLab: fehlerhafte Autorisierung
- HighCVE-2026-15723GitLab: LDAP-Injection
- LowCVE-2026-14288GitLab: falsch aufgelöster Name oder Verweis
Other news entries
- Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE FlawsNewsThe Hacker News
- GitLab critical patches include one for a bug that allows code execution by unauthenticated usersNewsCSO Online
- ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 MoreNewsThe Hacker News
- Max-severity GitLab bug allows remote code execution over 12 years of releasesNewsThe Register — Security
- GitLab: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- GitLab warns of new max severity code execution vulnerabilityNewsBleepingComputer
- NCSC-2026-0447 [1.00] [M/H] Kwetsbaarheden verholpen in GitLab door GitLab Inc.NewsNCSC-NL
- Multiples vulnérabilités dans GitLab (22 octobre 2026)NewsCERT-FR (ANSSI)
Source: https://pwn.watch/i/red-hat-consulting-gitlab-breach-october-2025
ID