Back to all news
Security

Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases

The Hacker News·October 21, 2026·1 min read
Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases

GitLab released fixes on October 21 for a critical flaw (CVSS 10.0) allowing unauthenticated remote code execution on self-managed servers. The vulnerability affects every version back to 7.0, released in 2014. Administrators who patched on October 12 must update again, as that fix only covered versions 19.2 and later, while the new fixed versions sit one patch above.

Read at The Hacker News
Daily crypto arcade

Read the news, then play it.

Chainshorts turns crypto headlines into a daily game. Catch up in 60 words, then jump into daily lucky draws for a shot at the pot.

Open ChainshortsGet it on the Solana dApp Store