CISA says max severity GitLab flaw now exploited in the wild
Teaser from the source
Attackers have started exploiting a maximum-severity GitLab vulnerability patched earlier this month, according to the US Cybersecurity and Infrastructure Security Agency (CISA). [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on GitLab
Other advisories
- CriticalCVE-2026-105458GitLab: Mehrere Schwachstellen
- HighCVE-2026-16255Incorrect Authorization in GitLab
- HighCVE-2026-15723Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLab
- LowCVE-2026-14288Use of Incorrectly-Resolved Name or Reference in GitLab
- MediumCVE-2026-13319Authorization Bypass Through User-Controlled Key in GitLab
- MediumCVE-2026-12664Incorrect Authorization in GitLab
- MediumCVE-2026-112378Use of Less Trusted Source in GitLab
- LowCVE-2026-112326Improper Cleanup on Thrown Exception in GitLab
Other news entries
- Over 1,000 GitLab servers vulnerable to ongoing RCE attacksNewsBleepingComputer
- Alpine Linux rebuilds GitLab after attempted RCE attackNewsBleepingComputer
- Angriff auf Ruby-Lücke: Alpine Linux muss Gitlab-Instanz komplett neu aufsetzenNewsGolem.de — Security
- Max-Severity GitLab Vulnerability Exploited Against Alpine LinuxNewsSecurityWeek
- Cisco-Firewalls und GitLab-Lücke werden angegriffenNewsheise Security
- Hinter kritischen GitLab-Lücken stecken Fehler in der Regex-Engine von RubyNewsheise Security
- CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEVNewsThe Hacker News
- Vulnérabilité dans GitLab (30 octobre 2026)NewsCERT-FR (ANSSI)
ID