News Vulnerabilities & Zero-Days
Patch now: CVSS 10 GitLab flaw lets unauthenticated attackers run code, affecting every release back to 2014
GitLab has fixed CVE-2026-110264, a maximum-severity flaw that could let an unauthenticated attacker execute code on self-managed GitLab servers through a crafted regular expression. Every version from 7.0 onward is affected.
Jay B.