cves:CVE-2026-14288 × limpar

Resultados

2 casos · pág. 1/1

cert.ssi.gouv.fr · há 6h high

CERT-FR warns of multiple GitLab CE/EE vulnerabilities including remote code execution, fixed in 19.3.6, 19.4.3 and 19.5.1

The CERT-FR published advisory CERTFR-2026-AVI-1363 on multiple vulnerabilities in GitLab Community Edition (CE) and Enterprise Edition (EE). Exploitation can lead to remote arbitrary code execution, breach of data confidentiality and security policy bypass. The advisory relays the vendor's security bulletin of 21 October 2026 and lists 1…

CVE-2026-103515 CVE-2026-105711 CVE-2026-105777

thehackernews.com · há 3h · 5 fontes · 6 atualizações critical

GitLab patches CVE-2026-110264, a CVSS 10.0 unauthenticated RCE rooted in the Onigmo regex engine, as Ruby ships upstream fixes

GitLab released critical patch versions on October 21, 2026 for CVE-2026-110264, a CVSS 10.0 integer overflow in the regular expression compiler of GitLab CE/EE. A specially crafted expression could let an unauthenticated attacker run arbitrary code on a self-managed server (docs.gitlab.com). Affected releases go back to version 7.0 (June…

CVE-2026-110264 CVE-2026-15723 CVE-2026-112212 technology software_development