authors:Divya × criticity:critical × latest_source_host:theregister.com × limpar

Resultados

2 casos · pág. 1/1

theregister.com · há 21h · 5 fontes · 5 atualizações critical

GitLab patches CVE-2026-110264, a CVSS 10.0 unauthenticated RCE in the CE/EE regex compiler affecting every release since 7.0

GitLab released critical patch versions on October 21, 2026 for CVE-2026-110264, a CVSS 10.0 integer overflow in the regular expression compiler of GitLab CE/EE. A specially crafted expression could let an unauthenticated attacker run arbitrary code on a self-managed server (docs.gitlab.com). Affected releases go back to version 7.0 (June…

CVE-2026-110264 CVE-2026-15723 CVE-2026-112212

theregister.com · há 2d · 4 fontes · 4 atualizações critical

Ransomware groups Qilin, INC and Settra exploit PAN-OS GlobalProtect auth bypass CVE-2026-0257, pivoting to vCenter/ESXi

Palo Alto Networks Unit 42 reported on October 19, 2026 that ransomware operators are still actively exploiting CVE-2026-0257 (CVSS 7.8), an authentication bypass in the GlobalProtect portal and gateway of PAN-OS. The flaw lets attackers bypass MFA and open unauthorized VPN sessions. Unit 42 attributes exploitation attempts to Spikey Scor…

CVE-2026-0257 CVE-2023-27532 Qilin Spikey Scorpius professional services legal services