News
vulnerability 2026-019: Critical Vulnerability in GitLab Community and Enterprise Editions - CERT-EU Security Advisories cybersecurity Hackers Built AI-Powered Attack System Using Claude and Grok to Target Banks - CyberPress cybersecurity PHP2Shell Exploitation Started Days Before Patches - SecurityWeek cybersecurity Hackers Target FortiGate, FortiWeb and Palo Alto GlobalProtect, Exposing 70,000+ Credentials - CyberPress cybersecurity ScarlettGroup Cyber Extortion Gang Uses Tor Leak Site and Disclosure Deadlines to Pressure Victims - CyberPress cybersecurity Fortinet Patches Critical Vulnerabilities in FortiOS, FortiManager, and FortiAnalyzer - CyberPress threat-intel Attackers Target Flowise AI Agents With Credential Theft, Prompt Injection and Workflow Hijacking - GBHackers cybersecurity Smart TVs Expose 57 Million Viewing Records, Continue Tracking Users After Opt-Out - CyberPress threat-intel Hackers Exploit Siemens Software Center Vulnerability to Execute Malicious Code - GBHackers ai AI’s hidden storage bill: What inference leaves behind - MIT Technology Review cybersecurity Hackers Abuse Over 25 Trusted Online Platforms to Spread Phishing Scams, Cisco Warns - CyberPress cybersecurity AI-Assisted Hackers Target Government Linux Servers to Steal Passwords and Sensitive Data - CyberPress cybersecurity LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release - The Hacker News cybersecurity Authorities disrupt nearly 11,000 cybercrime networks in Africa - BleepingComputer cybersecurity Hackers Exploit Siemens Software Center Vulnerability to Execute Malicious Code - CyberPress
1 / 15
All news ›
Vulnerability

2026-019: Critical Vulnerability in GitLab Community and Enterprise Editions

On 21 October 2026, GitLab published a security advisory addressing several vulnerabilities among which a critical flaw that could allow an unauthenticated user to execute arbitrary code on a GitLab server. CERT-EU recommends organisations to update affected assets as soon as possible, prioritising internet facing assets, and to run an assessment to identify compromised assets.

Continue on CERT-EU Security Advisories ↗ ‹ All news Get the newsletter

The summary and image come from CERT-EU Security Advisories; the image is shown from their website.