Over 1,000 GitLab Servers Vulnerable to Active Remote Code Execution Attacks
More than 1,000 Internet-exposed GitLab servers remain unpatched against a critical remote code execution vulnerability actively exploited by attackers.
Tag
#GitLab
4 results in the archive.
Critical GitLab Flaw (CVSS 10.0) Allows Unauthenticated RCE Since 2014
A critical unauthenticated remote code execution vulnerability affecting GitLab self-managed servers since version 7.0 in 2014 was patched on October 21, 2026.
GitLab CVSS 10 File-Read Flaw Faces In-the-Wild Probes
GitLab issued patches for a critical CVSS 10.0 path traversal flaw in its repository commits API that allows unauthenticated file reads and is being actively probed in the wild.
GitLab CVE-2026-19478 Exploited Days After Disclosure
A critical code injection vulnerability in GitLab, CVE-2026-19478, is actively exploited shortly after disclosure, enabling unauthenticated attackers to modify or delete certain publicly accessible projects.