Threat Pulse 62High
2026-016: Critical Vulnerability in GitLab CE and EE
Severity 4PatchedconfirmedGovernmentAI and software supply chain

On 12 October 2026, GitLab released versions 19.4.2, 19.3.4 and 19.2.8 of GitLab Community Edition (CE) and Enterprise Edition (EE), fixing 24 security issues among which a critical vulnerability that could allow an unauthenticated attacker to execute arbitrary code on the server. CERT-EU strongly recommends upgrading self-managed GitLab CE/EE instances to a fixed version as soon as possible, starting with internet-facing instances.

· 24 days ago · CERT-EU advisories
SourcesCERT-EU advisories
Why this score

Machine rubric: impact 1, exploitability 2, critical sector 1; from CERT-EU advisories.

Back to the board

Updated Nov 5, 01:46 UTC. Refreshes on its own.

Add a threat

Paste a link to an advisory, an article or an X post. A person reads every submission before it shows; nothing posts on its own.

Share

The picture people see when the link is posted
Post on XSave picture

This picture is what X, iMessage, Slack and Facebook show under the link. It is drawn fresh from the live board: the board and chart pictures update every 10 minutes, an event picture follows that event.