Integer Overflow or Wraparound in GitLab
CVSS Skor
10.0
EPSS İhtimal
%0.5
Risk Skoru
0.1
Yayın
6 gün önce
İlgili Siber Güvenlik Haberleri (Newsroom)
Bu zafiyetin basında ve siber güvenlik yayın organlarında yer aldığı makaleler ve analiz bültenleri:
Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)
OverviewOn October 12, 2026, GitLab released 19.4.2, 19.3.5, and 19.2.8 to fix CVE-2026-97229, an integer overflow in its CI/CD regular-expression handling. The issue was reported through HackerOne by joaxcar. GitLab assigned it a CVSS score of 10.0 and described possible code execution by an unauthenticated user.The advisory states that CVE-2026-97229 affects GitLab CE and EE from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2. GitLab says all deployment types are affected unless stated otherwise. GitLab.com was patched before disclosure, and Dedicated customers do not need to
CISA Adds Microsoft, Ivanti, Cisco and Palo Alto Networks Vulnerabilities to KEV Catalog
CISA has expanded its Known Exploited Vulnerabilities (KEV) catalog with four vulnerabilities affecting Microsoft Windows, Ivanti Connect Secure, Cisco Secure Email Gateway, and Palo Alto Networks PAN-OS. What makes these…
Microsoft Patch Tuesday – October 2026
1,411 Vulnerabilities and Three Zero-Days An actively exploited Windows Shell flaw, publicly disclosed vulnerabilities and a record-breaking security release put enterprise patch management under pressure. 1. October’s Patch Tuesday Is…
CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLab
OverviewOn October 12, 2026, GitLab published a critical patch release for CVE-2026-97229, an integer overflow or wraparound (CWE-190) in the CI/CD regular expression compiler affecting GitLab Community Edition (CE) and Enterprise Edition (EE). GitLab assigned the vulnerability a CVSSv3.1 score of 10.0. Under certain conditions, a remote attacker can execute arbitrary code on an affected GitLab server through a specially crafted regular expression stored in a malicious CI/CD configuration. While the vendor supplied CVSS score indicates that exploitation is fully unauthenticated, in reproducing
GitLab waarschuwt voor kritiek beveiligingslek met CVSS 10.0-score
GitLab waarschuwt ontwikkelaars en organisaties voor een kritieke kwetsbaarheid in de software die een CVSS-impactscore van ...
GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code
GitLab has released patches for a maximum-severity security flaw impacting its Community Edition (CE) and Enterprise Edition (EE) software that could result in arbitrary code execution. "GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD
CVE-2026-97229: Critical GitLab Vulnerability Could Allow Remote Code Execution
GitLab has addressed CVE-2026-97229, a critical vulnerability in its CI/CD Regular Expression Compiler that could allow an unauthenticated attacker to execute arbitrary code on a vulnerable server. The vulnerability affects…
İlgili Benzer Açıklar
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-97229"