GitLab warns of new max severity code execution vulnerability

CVE v události 3

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE.

Tahle CVE jsem vytáhl z širšího textu článku: CVE-2021-22175, CVE-2021-39935, CVE-2026-0723, CVE-2026-85706, CVE-2026-97229. Neukazuju u nich proto fakta z katalogů výše, a to preventivně, protože článek se na ně mohl jen odkazovat, třeba jako na starší kauzu.

Jak se o tom psalo 11

1. 2. 11. 2026 13:47 · BleepingComputer US

   Over 1,000 GitLab servers vulnerable to ongoing RCE attacks

   Over 1,000 Internet-exposed GitLab servers are still unpatched against a maximum-severity flaw actively exploited in remote code execution attacks. [...]

2. 30. 10. 2026 14:00 · BleepingComputer US

   CISA says max severity GitLab flaw now exploited in the wild

   Attackers have started exploiting a maximum-severity GitLab vulnerability patched earlier this month, according to the US Cybersecurity and Infrastructure Security Agency (CISA). [...]

3. 29. 10. 2026 · zachyceno 17:00 · GitLab Security US

   GitLab Patch Release: 19.5.3, 19.4.5, 19.3.7, 19.2.10, 19.1.10, 19.0.11, 18.11.14

   On October 29, 2026, we released versions 19.5.3, 19.4.5, 19.3.7, 19.2.10, 19.1.10, 19.0.11, 18.11.14 for GitLab Community Edition and Enterprise Edition. These versions resolve a number of regressions and bugs. This patch release does not include any security fixes. GitLab Community Edition and Enterprise Edition 19.5.3 [Backport 19.5] Distrust compromised eMudhra CA certificates Bump Go to 1.27.3 [19.5] Backport Ruby ISEQ and imemo_env Copy-on-Write GC fixes for 3.3 Backport of ‘Stop jobs…

4. 23. 10. 2026 12:42 · DNSC Rumunsko RO

   ALERTĂ: Vulnerabilități critice în GitLab

   DESCRIERE În data de 21.10.2026, GitLab a publicat actualizările de securitate 19.5.1, 19.4....

5. 22. 10. 2026 15:30 · CERT-SE SE

   Kritisk sårbarhet i GitLab CE och EE

   Gitlab har publicerat säkerhetsuppdateringar för en ny sårbarhet, CVE-2026-110264. Sårbarheten har fått en CVSS-klassning på 10.0 och kan utnyttjas av en oautentiserad användare för att köra godtycklig kod. [1][2] GitLab har rättat sårbarheterna i följande versioner av GitLab Community Edition (CE) och Enterprise Edition (EE): 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, 18.11.13.

6. 22. 10. 2026 14:27 · Cyber Centre Kanada CA

   GitLab security advisory (AV26-1074)

   Serial Number: AV26-1074 Date: October 22, 2026 As of October 21, 2026, GitLab is affected by vulnerabilities in the following product: GitLab Community Edition (CE) and Enterprise Edition (EE) Prior to 18.11.13 Prior to 19.0.10 Prior to 19.1.9 Prior to 19.2.9 Prior to 19.3.6 Prior to 19.4.3 Prior to 19.5.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. GitLab Critical Patch Release: 19.5.1, 19.4.3,…

7. 22. 10. 2026 13:41 · BleepingComputer US nadpis události

   GitLab warns of new max severity code execution vulnerability

   GitLab has released security patches for a maximum-severity Regular Expression Compiler flaw that can let remote attackers run arbitrary code on vulnerable servers. [...]

8. 22. 10. 2026 11:14 · CERT-EU EU

   2026-019: Critical Vulnerability in GitLab Community and Enterprise Editions

   On 21 October 2026, GitLab published a security advisory addressing several vulnerabilities among which a critical flaw that could allow an unauthenticated user to execute arbitrary code on a GitLab server. CERT-EU recommends organisations to update affected assets as soon as possible, prioritising internet facing assets, and to run an assessment to identify compromised assets.

9. 22. 10. 2026 11:12 · NCSC-NL NL

   NCSC-2026-0447 [1.00] [M/H] Kwetsbaarheden verholpen in GitLab door GitLab Inc.

   GitLab heeft 12 kwetsbaarheden verholpen in GitLab Community Edition (CE) en Enterprise Edition (EE). Eén kwetsbaarheid is als kritiek aangemerkt. GitLab heeft een kwetsbaarheid verholpen in GitLab Community Edition en Enterprise Edition binnen de versies vanaf 7.0 tot bepaalde 19.x releases. De kwetsbaarheid met kenmerk CVE-2026-110264 heeft een CVSS-score van 10,0 en betreft een integer overflow bij het compileren van een speciaal vervaardigde reguliere expressie. Onder bepaalde…

10. 22. 10. 2026 09:15 · CSIRT Itálie (ACN) IT

    Risolte vulnerabilità in GitLab CE/EE

    Rilasciati aggiornamenti di sicurezza che risolvono 12 vulnerabilità, di cui 1 con gravità “critica” e 2 con gravità “alta”, in GitLab Community Edition (CE) ed Enterprise Edition (EE). Tali vulnerabilità, qualora sfruttate, potrebbero consentire a un utente malintenzionato di eludere le funzionalità di sicurezza, di impersonare un'entità legittima o di eseguire codice arbitrario sui sistemi interessati.

11. 13. 10. 2026 15:02 · Cyber Centre Kanada CA

    GitLab security advisory (AV26-1028)

    Serial number: AV26-1028 Date: October 13, 2026 As of October 12, 2026, GitLab is affected by vulnerabilities in the following product: GitLab Prior to 19.2.8 Prior to 19.3.5 Prior to 19.4.2 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. GitLab Critical Patch Release: 19.4.2, 19.3.5, 19.2.8 GitLab release notes | GitLab Docs