/
attack_type:cache_poisoning × victim_sectors:software_development × criticity:critical × limpar

Resultados

1 casos · pág. 1/1

thehackernews.com · · 5 fontes · 6 atualizações critical

GitLab patches CVE-2026-110264, a CVSS 10.0 unauthenticated RCE rooted in the Onigmo regex engine, as Ruby ships upstream fixes

GitLab released critical patch versions on October 21, 2026 for CVE-2026-110264, a CVSS 10.0 integer overflow in the regular expression compiler of GitLab CE/EE. A specially crafted expression could let an unauthenticated attacker run arbitrary code on a self-managed server (docs.gitlab.com). Affected releases go back to version 7.0 (June…