Git fixes recursive-clone code execution flaw CVE-2026-111760
Fixes are Git 2.56.1 and backports for the 2.50–2.55 series; the same releases patch five other flaws.
Stories per day · 30 days
14 RSS
Relatedrce17integer-overflow14ci-cd11kev8remote-code-execution8cve-2026-972297cisa6onigmo6supply-chain6github5litellm5patch5ruby5alpine-linux4devsecops3php3regex3self-managed3
95 stories, newest first · one card per story
Stories tagged #gitlab
Metasploit adds unauthenticated RCE modules for perimeter devices
New modules cover Flowise, SPIP, OpenBullet2, GitLab, Portainer, and a NetScaler bug the vendor said was exploited.
5
Over 1,000 GitLab servers vulnerable to ongoing RCE attacks
CISA added CVE-2026-97229 to KEV catalog; over 1,000 unpatched GitLab instances exposed to exploitation.
Alpine Linux rebuilds GitLab after attempted RCE attack
Attackers attempted to exploit CVE-2026-97229 in Alpine Linux GitLab on October 20–21, prompting a full rebuild and password reset with no confirmed compromise.
1
CISA adds exploited GitLab and Cisco firewall flaws to KEV
Federal agencies must fix unauthenticated GitLab code execution and a Cisco firewall reload bug by November 1, 2026.
Attackers exploit max-severity GitLab flaw CVE-2026-97229
The integer overflow allows unauthenticated code execution through a crafted CI/CD regular expression; fixes are 19.4.2, 19.3.5, and 19.2.8.
CISA confirms active exploitation of GitLab CVE-2026-97229
Unauthenticated attackers can run code via a crafted CI/CD regex; federal remediation is due November 1.
Max-severity GitLab flaw exploited against Alpine Linux
CVE-2026-97229 allows unauthenticated code execution; Alpine rebuilt its instance, and CISA gave agencies three days to patch.
1
CISA says GitLab integer overflow CVE-2026-97229 is exploited
Fixes cover GitLab 19.2.8, 19.3.4, and 19.4.2; federal agencies face a November 1 deadline.
CISA adds exploited GitLab RCE and Cisco firewall DoS to KEV
Federal civilian agencies are told to apply fixes for both flaws by November 1, 2026.
CISA adds exploited Ivanti Connect Secure and GitLab flaws to KEV
CVE-2026-111357 is missing authentication in Ivanti Connect Secure; CVE-2026-97229 is an integer overflow in GitLab CE and EE.
2
CISA adds exploited GitLab integer overflow CVE-2026-97229 to KEV
FCEB agencies must prioritize the GitLab flaw on exposed assets and check for compromise before patching.
Attacker probed Alpine GitLab via CVSS 10 flaw (CVE-2026-97229)
Alpine rebuilt gitlab.alpinelinux.org and reset passwords after probes; GitLab upgrades alone miss installs on stock Ruby.
2
CISA KEV lists GitLab unauthenticated RCE CVE-2026-97229
A crafted regular expression in CI/CD configuration can run arbitrary code; the federal due date is November 1, 2026.
Alpine rebuilds GitLab after CVE-2026-97229 exploit attempts
Alpine found no proof of code execution or package tampering, but reset every password and replaced GitLab secret keys.
3
GitLab patches max-severity regex compiler RCE (CVE-2026-110264)
Unauthenticated users can run code via integer overflow when a crafted regular expression is compiled.
PHP2Shell attempts preceded same-week patches for PHP, GitLab and Node.js
GitLab’s unauthenticated RCE is CVSS 10.0 back to version 7.0; LiteLLM 1.107.0 stole credentials and OpenCode keys may have leaked.
Check Point weekly brief covers Onamae intrusion, PHP exploits, GitLab RCE
The October 26 bulletin also flags an exploited Arista flaw, a LiteLLM package compromise, and the Aokigahara infostealer.
Ruby posts regexp compilation fixes linked to GitLab CVEs
The October 23 oss-security note only links the ruby-lang.org announcement and lists no versions or CVE identifiers.
Ruby fixes three regex bugs behind four critical GitLab RCE flaws
Apps that compile attacker-controlled patterns are affected; GitLab’s unauthenticated CVE-2026-110264 covers versions from 7.0 and is not in KEV.
AINews 'Black October' roundup clusters AI-linked security disclosures
The digest says many incidents were found earlier and disclosed together, while exploitation scale is disputed.
GitLab patches unauthenticated code execution bug CVE-2026-110264
The integer overflow hits GitLab CE/EE back to 7.0; fixes include 19.5.1 and backports through 18.11.13.
GitLab patches unauthenticated RCE in CE and EE (CVE-2026-110264)
The integer overflow reaches GitLab 7.0 from June 2014; no in-the-wild exploitation is indicated yet.
2
pwn.watch lists GitLab RCE, leaked kernel bugs and LiteLLM compromise
The same live feed also covers BIND GSS-TSIG memory corruption, Node.js security releases, bank AI-agent logins and a Railway environment-variable incident.
14