[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fB0kkqopdfvElyuc0ZRSanVZzT_VrdZUq9RV49PqE1Os":3},{"article":4,"iocs":40,"watch_terms":60,"solutions":61,"lesson":151},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":27,"category":28,"article_tags":32},"21002b07-f6df-4540-8845-d91d8c2a670e","GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code","gitlab-patches-cvss-10-0-flaw-that-could-let-unauthenticated-users-run-server-co-6888d3","GitLab has released patches for a maximum-severity security flaw impacting its Community Edition (CE) and Enterprise Edition (EE) software that could result in arbitrary code execution. \"GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI\u002FCD","GitLab has released patches for a critical security vulnerability (CVE-2026-97229) with a CVSS score of 10.0. This flaw could allow unauthenticated users to execute arbitrary code on GitLab servers through a specially crafted regular expression in CI\u002FCD configurations. The company also addressed three high-severity bugs, including cross-site scripting and improper authorization vulnerabilities.","GitLab patches CVSS 10.0 flaw allowing unauthenticated users to run server code.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F10\u002Fgitlab-patches-cvss-100-flaw-that-could.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEgOWNiMkzMghhERT5BPyrVI9JdCWExRLtDNHIHPjmT_WnGhLHyWhahW3xPurPPQJUn7Yz0_g9Nk0zWinEKh4J71g9viLtNVx2fM2anNzhA514PAgZBxobRfeP1jSsovLI6iVi9HIUXxv_dLvK8DrKy5vZktoxrxyd0riB83XCR2dlne7lEgTqdXW1Rwhekz\u002Fs1600\u002Fgitlab-exploit.jpg","2026-10-13T08:43:37+00:00","2026-10-13T10:00:15.314154+00:00",9,[17,20,22,24],{"name":18,"type":19},"GitLab Community Edition","product",{"name":21,"type":19},"GitLab Enterprise Edition",{"name":23,"type":19},"AI Gateway",{"name":25,"type":26},"GitLab","vendor","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":27,"icon":29,"name":30,"slug":31},null,"Vulnerabilities","vulnerabilities",[33,35],{"category":34},{"id":27,"icon":29,"name":30,"slug":31},{"category":36},{"id":37,"icon":29,"name":38,"slug":39},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[41,45,48,51,54,57],{"type":42,"value":43,"context":44},"cve","CVE-2026-97229","Maximum severity flaw allowing arbitrary code execution",{"type":42,"value":46,"context":47},"CVE-2026-92883","High severity cross-site scripting vulnerability",{"type":42,"value":49,"context":50},"CVE-2026-16301","High severity improper authorization vulnerability",{"type":42,"value":52,"context":53},"CVE-2026-14814","High severity permissive regular expression vulnerability",{"type":42,"value":55,"context":56},"CVE-2026-90970","Critical flaw in AI Gateway allowing arbitrary command execution",{"type":42,"value":58,"context":59},"CVE-2026-85706","Maximum severity security flaw in GitLab CE\u002FEE with in-the-wild probes",[25,18,21],{"controls":62,"vendors":150},[63,92,121],{"slug":64,"name":65,"problem":66,"products":67},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[68,76,84],{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"slug":93,"name":94,"problem":95,"products":96},"patch-management","Automated patch management","Known holes get closed in days, not months.",[97,105,113],{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":101,"product_name":102,"url":103,"description":104},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":106,"vendor_name":107,"vendor_logo":108,"product_slug":109,"product_name":110,"url":111,"description":112},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":114,"vendor_name":115,"vendor_logo":116,"product_slug":117,"product_name":118,"url":119,"description":120},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"slug":122,"name":123,"problem":124,"products":125},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[126,134,142],{"vendor_slug":127,"vendor_name":128,"vendor_logo":129,"product_slug":130,"product_name":131,"url":132,"description":133},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-xdr","Cortex XDR","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xdr","Endpoint detection and response with extended detection across network, cloud and identity.",{"vendor_slug":135,"vendor_name":136,"vendor_logo":137,"product_slug":138,"product_name":139,"url":140,"description":141},"sophos","Sophos","\u002Fvendor-logos\u002Fsophos.png","sophos-endpoint","Sophos Endpoint","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fproducts\u002Fendpoint-security","Endpoint protection with Intercept X anti-ransomware technology and EDR.",{"vendor_slug":143,"vendor_name":144,"vendor_logo":145,"product_slug":146,"product_name":147,"url":148,"description":149},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",[],{"slug":152,"title":153,"body":154,"framework_refs":155,"framework_notes":167},"gitlab-cvss-100-rce-flaw-exposes-servers-to-unauthenticated-code-execution","GitLab CVSS 10.0 RCE Flaw Exposes Servers to Unauthenticated Code Execution","A critical vulnerability (CVE-2026-97229) in GitLab allowed unauthenticated attackers to execute arbitrary code on servers by exploiting malicious regular expressions embedded in CI\u002FCD pipeline configurations — a CVSS 10.0 severity rating reflecting the maximum possible risk. The flaw required no credentials, dramatically lowering the barrier for exploitation and putting every unpatched GitLab instance at immediate risk of full server compromise. CI\u002FCD pipelines are high-value targets because they sit at the heart of software delivery, meaning a successful attack could lead to supply chain compromise, code tampering, or credential theft. This incident underscores that developer tooling infrastructure carries the same critical security obligations as production systems and must be patched with urgency.",[156,157,158,159,160,161,162,163,164,165,166],"CIS Control 7: Continuous Vulnerability Management","CIS Control 4: Secure Configuration of Enterprise Assets and Software","CIS Control 12: Network Infrastructure Management","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 CM-6: Configuration Settings","NIST SP 800-53 AC-3: Access Enforcement","NIST SP 800-53 AU-6: Audit Record Review and Analysis","NIST CSF ID.RA-1: Asset vulnerabilities are identified and documented","NIST CSF RS.MI-3: Newly identified vulnerabilities are mitigated or documented as accepted risks","ITIL: Change and Release Management (emergency change procedures)","OWASP CI\u002FCD Security Top 10: CICD-SEC-8 (Ungoverned Usage of 3rd Party Services)",{}]