As cited
Copy frozen at (site build).
vulnerabilities
NCSC-2026-0447 Vulnerabilities patched in GitLab by GitLab Inc.
GitLab has patched 12 vulnerabilities in GitLab Community Edition and Enterprise Edition, with one critical flaw. CVE-2026-110264 has a CVSS score of 10.0 and allows unauthenticated remote code execution through integer overflow in regex compilation affecting versions 7.0 and later. Two additional high-severity vulnerabilities, CVE-2026-15723 and CVE-2026-112212, enable account takeover via SAML/LDAP misconfigurations and OAuth/OIDC cache poisoning respectively.
Why it matters: GitLab administrators managing self-hosted instances must patch immediately to address CVE-2026-110264 and verify their SAML, LDAP, and OAuth configurations to prevent remote code execution and account takeovers. GitLab has published detection rules for self-managed installations to search for exploitation attempts.
- Source published
- First seen by Cybersecurity Tracker