GitLab admins must patch again for a CVSS 10 flaw reaching back to 2014

Self-managed GitLab servers face a critical unauthenticated code-execution flaw, CVE-2026-110264, affecting releases dating back to version 7.0. Administrators who installed GitLab’s October 12 update still need to upgrade: it did not fix this newly disclosed vulnerability. GitLab reports no known exploitation, but has not disclosed the conditions required to trigger the flaw. Source

Läs hela artikeln hos källan.