> TritonInfoSec News
Home / Oct 14, 2026 / Story
0
#5 The Hacker News general October 13, 2026 at 08:43 UTC

GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code

By [email protected] (The Hacker News)

AI Summary

GitLab patched a CVSS 10.0 vulnerability in both Community Edition and Enterprise Edition that allowed unauthenticated remote attackers to execute arbitrary code on GitLab servers via a maliciously crafted regular expression in a CI/CD pipeline configuration. The flaw required no authentication, making it exploitable by any external attacker with network access to the instance. GitLab administrators should apply patches immediately given the maximum severity and unauthenticated attack surface.

Read full article → https://thehackernews.com/2026/10/gitlab-patches-c…

Relevance score: 89.0/100

# More from October 14

  1. 1
    Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug The Hacker News
  2. 2
    Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far The Hacker News
  3. 3
    Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers The Hacker News
  4. 4
    $86 Million Crypto Heist Linked to Ledger Signer Hardware Implant SecurityWeek
  5. 6
    DOJ charges 14 over a sprawling North Korean remote work scheme CyberScoop
  6. 7
    Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxies The Hacker News
  7. 8
    SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft The Hacker News
  8. 9
    GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking The Hacker News
  9. 10
    OpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference Room The Hacker News