poslední zpráva · zachyceno
SPOJENO AI
GitLab warns of max severity code execution vulnerability
GitLab warned users today to immediately patch a maximum-severity vulnerability in the CI/CD Regular Expression Compiler that could let remote attackers run arbitrary code on targeted instances. [...]
GitLab FI US EU IT FR
CVE v události 24
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-100104 | – | – | – |
| CVE-2026-100755 | – | – | – |
| CVE-2026-101168 | – | – | – |
| CVE-2026-103549 | – | – | – |
| CVE-2026-104661 | – | – | – |
| CVE-2026-105458 | – | – | – |
| CVE-2026-14210 | – | – | – |
| CVE-2026-14552 | – | – | – |
| CVE-2026-14814 | – | – | – |
| CVE-2026-16275 | – | – | – |
| CVE-2026-16301 | – | – | – |
| CVE-2026-5954 | 4.2 3.1 · GitLab | – | – |
| CVE-2026-6567 | 4.3 3.1 · GitLab | – | – |
| CVE-2026-7767 | 5.8 3.1 · GitLab | – | – |
| CVE-2026-78335 | 4.2 3.1 · GitLab | – | – |
| CVE-2026-81839 | 7.7 3.1 · GitLab | – | – |
| CVE-2026-82632 | 3.1 3.1 · GitLab | – | – |
| CVE-2026-84284 | 5.3 3.1 · GitLab | – | – |
| CVE-2026-85529 | 5.3 3.1 · GitLab | – | – |
| CVE-2026-92528 | 4.2 3.1 · GitLab | – | – |
| CVE-2026-9268 | 2.7 3.1 · GitLab | – | – |
| CVE-2026-92883 | 8.7 3.1 · GitLab | – | – |
| CVE-2026-96893 | 7.3 3.1 · GitLab | – | – |
| CVE-2026-97229 | 10.0 3.1 · GitLab | – | – |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 10.0.
Tahle CVE jsem vytáhl z širšího textu článku: CVE-2026-0723, CVE-2026-85706. Neukazuju u nich proto fakta z katalogů výše, a to preventivně, protože článek se na ně mohl jen odkazovat, třeba jako na starší kauzu.
Jak se o tom psalo 6
-
· zachyceno · NCSC-FI FI
GitLab Critical Patch Released
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 10.0, CVEs: CVE-2026-97229, CVE-2026-92883, CVE-2026-16301, CVE-2026-14814, CVE-2026-81839, CVE-2026-96893, CVE-2026-101168, CVE-2026-7767, CVE-2026-16275, CVE-2026-84284, CVE-2026-85529, CVE-2026-100755, CVE-2026-14552, CVE-2026-6567, CVE-2026-104661, CVE-2026-14210, CVE-2026-105458, CVE-2026-5954, CVE-2026-92528, CVE-2026-78335 (+4 other associated CVEs), Summary: On October 12, 2026, we released…
-
· BleepingComputer US nadpis události
GitLab warns of max severity code execution vulnerability
GitLab warned users today to immediately patch a maximum-severity vulnerability in the CI/CD Regular Expression Compiler that could let remote attackers run arbitrary code on targeted instances. [...]
-
· CERT-EU EU
2026-016: Critical Vulnerability in GitLab CE and EE
On 12 October 2026, GitLab released versions 19.4.2, 19.3.4 and 19.2.8 of GitLab Community Edition (CE) and Enterprise Edition (EE), fixing 24 security issues among which a critical vulnerability that could allow an unauthenticated attacker to execute arbitrary code on the server. CERT-EU strongly recommends upgrading self-managed GitLab CE/EE instances to a fixed version as soon as possible, starting with internet-facing instances.
-
· CSIRT Itálie (ACN) IT
Risolte vulnerabilità su GitLab CE/EE
Rilasciati aggiornamenti di sicurezza che risolvono 24 vulnerabilità, di cui 1 con gravità “critica” e 5 con gravità “alta”, in GitLab Community Edition (CE) ed Enterprise Edition (EE). Tali vulnerabilità, qualora sfruttate, potrebbero consentire ad un utente malintenzionato, in determinate condizioni, di eseguire codice arbitrario, eludere dei meccanismi di sicurezza e accedere ad informazioni sensibili sui sistemi interessati.
-
· zachyceno · CERT-FR – avis FR
Multiples vulnérabilités dans GitLab (12 octobre 2026)
De multiples vulnérabilités ont été découvertes dans GitLab. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
-
· zachyceno · GitLab Security US
GitLab Critical Patch Release: 19.4.2, 19.3.4, 19.2.8
On October 8, 2026, we released versions 19.4.2, 19.3.4, 19.2.8 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes, and we strongly recommend that all self-managed GitLab installations be upgraded to one of these versions immediately. GitLab.com is already running the patched version. GitLab Dedicated customers do not need to take action. GitLab releases fixes for vulnerabilities in patch releases. There are two types of patch…