> TritonInfoSec News
Home / Sep 13, 2026 / Story
0
#3 SecurityWeek general September 11, 2026 at 16:11 UTC

GitLab Vulnerability Exploited One Day After Disclosure

By Ionut Arghire

AI Summary

A critical-severity path traversal vulnerability in GitLab (CVE-2023-2825) — allowing unauthenticated attackers to read arbitrary files from the server — was exploited within one day of public disclosure, with internet-wide scanning already detected. GitLab has urged operators of all self-managed installations to upgrade immediately. The speed of exploitation underscores the narrow patching window for critical GitLab flaws affecting potentially thousands of self-hosted instances.

Read full article → https://www.securityweek.com/gitlab-vulnerability-…

Relevance score: 86.0/100

# More from September 13

  1. 1
    Claude Used to Automate Exploitation and Data Theft Across Multiple Victims The Hacker News
  2. 2
    Artifactory flaws chained in attacks deploying backdoor malware BleepingComputer
  3. 4
    Check Point Patches Critical VPN Vulnerabilities SecurityWeek
  4. 5
    PaperCut Flaws Exploited in AI-Powered Attacks SecurityWeek
  5. 6
    Researchers say OpenAI agents were behind May hacking campaign targeting RubyGems CyberScoop
  6. 7
    Passkey-themed phishing attacks lead to Microsoft 365 data theft BleepingComputer
  7. 8
    Trezor Says 347,000 Users Received Phishing Emails After Brevo Hack SecurityWeek
  8. 9
    Anthropic Says Seven China-Based AI Labs Ran Industrial-Scale Claude Distillation Attacks The Hacker News
  9. 10
    Ukrainian Conti Ransomware Developer Sentenced to 4 Years in US Prison SecurityWeek