importantSYS.SOURCE: thehackernews.com• 2026-10-22T00:27:34+05:30
Critical GitLab Vulnerability (CVSS 10.0) Enables Unauthenticated Remote Code Execution Across Multiple Releases
A critical GitLab vulnerability (CVSS 10.0) allows unauthenticated remote code execution on self-managed servers, affecting all versions from 7.0 (2014) to present. Administrators must apply the latest patches as previous updates only addressed newer versions.
GitLab released fixes on October 21 for a flaw that lets an attacker run code on a self-managed server without logging in, and it affects every version of the software going back to 7.0, released in 2014.
The fix matters even for administrators who patched nine days earlier: the October 12 update covered only versions 19.2 and later, and the new fixed versions sit one patch above it, so an
*** END OF TRANSMISSION ***