Advertisement
CVE-2026-97229: GitLab RCE via Integer Overflow — Patch Now
Critical vulnerability CVE-2026-97229 in GitLab Community/Enterprise Edition allows unauthenticated RCE through CI/CD regex, actively exploited.
CVE-2026-90970: GitLab AI Gateway RCE Flaw — Update Self-Hosted Now
GitLab patched a critical AI Gateway flaw (CVE-2026-90970). Logged-in Duo Agent users can achieve remote command execution on self-hosted instances. Update immediately.
GitLab GraphQL Flaw CVE-2026-19478: Unauthenticated Project Deletion
GitLab addresses a critical GraphQL flaw (CVE-2026-19478) allowing unauthenticated attackers to delete public projects and user data on self-managed CE/EE instances.
GitLab 18.11.3 RCE via Jupyter Notebook Diff — Mitigation Guide
An exploit PoC for GitLab 18.11.3 allows authenticated users to achieve RCE as the git user by requesting diffs of crafted Jupyter notebooks. Learn how to mitigate.