/
vendors:GitLab × cves:CVE-2026-85706 × limpar

Resultados

2 casos · pág. 1/1

cisa.gov · critical

CISA adds GitLab CE/EE path traversal flaw CVE-2026-85706 to KEV catalog on evidence of active exploitation

CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-09-11 based on evidence of active exploitation: CVE-2026-85706, a path traversal vulnerability in GitLab Community Edition (CE) and Enterprise Edition (EE). CISA describes this vulnerability type as a frequent attack vector for malicious cyber actors…

CVE-2026-85706 government
thehackernews.com · · 5 fontes · 6 atualizações critical

GitLab patches CVE-2026-110264, a CVSS 10.0 unauthenticated RCE rooted in the Onigmo regex engine, as Ruby ships upstream fixes

GitLab released critical patch versions on October 21, 2026 for CVE-2026-110264, a CVSS 10.0 integer overflow in the regular expression compiler of GitLab CE/EE. A specially crafted expression could let an unauthenticated attacker run arbitrary code on a self-managed server (docs.gitlab.com). Affected releases go back to version 7.0 (June…

CVE-2026-110264 CVE-2026-15723 CVE-2026-112212 technology software_development