Topic

GitLab

Latest GitLab coverage — 2 articles.

GitLab · Critical · Patch

CVE-2026-110264: GitLab Critical RCE Reaches Back to Version 7.0

GitLab fixed a CVSS 10 flaw that could let an unauthenticated attacker run code on self-managed servers, in a release that closes 12 vulnerabilities. Here are the fixed versions, what GitLab has not said, and what to do now.

Oct 22, 20266 min read

CVE · KEV · Active Exploitation · Security Alert · Vulnerability · Developer Tools · GitLab

CVE-2026-85706: A CVSS 10 Path Traversal in GitLab's Commits API, Now in CISA's KEV Catalog

CVE-2026-85706, a path traversal flaw in GitLab's commits API, hit CVSS 10.0 and CISA's KEV catalog within a day. But there's one exposure condition that determines whether your instance is actually at risk.

Sep 12, 20264 min read