Onigmo

Mentions · 7d2
Mentions · 30d3
All mentions3
First seenOct 13, 2026
Last mentioned2d ago

Timeline

3 articles · newest first

Ruby fixes three regex bugs behind four critical GitLab RCE flaws

Apps that compile attacker-controlled patterns are affected; GitLab’s unauthenticated CVE-2026-110264 covers versions from 7.0 and is not in KEV.

The Hacker Newsupdated Oct 23, 18:13 UTC · 2d agofirst Oct 23, 17:54 UTC · 2d agoVulnerability 10 sourcesCVE-2026-110264 CVE-2026-972292 · 2 reads

GitLab fixes unauthenticated RCE back to version 7.0 (CVE-2026-110264)

The CVSS 10.0 Onigmo overflow has no known attacks and no workaround; only self-managed installs must upgrade.

The Hacker Newsupdated Oct 23, 18:13 UTC · 2d agofirst Oct 21, 18:57 UTC · 4d agoVulnerability 10 sourcesCVE-2026-110264 CVE-2026-15723 CVE-2026-1122126 · 2 reads

CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLab

Rapid7 reproduced unauthenticated GitLab RCE CVE-2026-97229 (CVSS 10) and urges immediate patching.

Rapid7 Blogupdated Oct 13, 11:42 UTC · 12d agofirst Oct 13, 11:29 UTC · 12d agoExploit / PoC 2 sourcesCVE-2026-972292

Related CVEs

by mentions

CVE-2026-110264<1%10.0
Unauthenticated RCE in GitLab CE/EE via regex integer overflow
published 4d agoGitLab CE/EEPoC ×8
CVE-2026-97229<1%10.0
Unauthenticated RCE in GitLab CE/EE via CI/CD regex
published 12d agoGitLab CE/EEPoC ×4
CVE-2026-157238.2
LDAP account takeover in GitLab when SAML and LDAP auto-link are on
published 4d agoGitLab CE/EE
CVE-2026-1122127.5
Unauthenticated OAuth/OIDC cache poisoning in GitLab CE/EE
published 4d agoGitLab CE/EE

Appears with

GitLabvendor · 3
CISAorganization · 2
Rubyvendor · 1
Rapid7organization · 1
GitLab Community Editionproduct · 1
GitLab Enterprise Editionproduct · 1
GitLaborganization · 1

Entities are extracted by the model from each article. First seen Oct 13, 2026, last mentioned 2d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.