2026-016: Critical Vulnerability in GitLab CE and EE
- Actief misbruik
- Niet bevestigd
- Hoogste CVSS
- —
- Kans op misbruik (EPSS)
- —
- Prioriteit
- 70 van 100
Uit de melding
On 12 October 2026, GitLab released versions 19.4.2, 19.3.4 and 19.2.8 of GitLab Community Edition (CE) and Enterprise Edition (EE), fixing 24 security issues among which a critical vulnerability that could allow an unauthenticated attacker to execute arbitrary code on the server.
CERT-EU strongly recommends upgrading self-managed GitLab CE/EE instances to a fixed version as soon as possible, starting with internet-facing instances.
Lees de volledige melding bij CERT-EU Security AdvisoriesBron: CERT-EU Security Advisories, CC BY 4.0, samengevat en vertaald door Seinwacht.