Threats
Vulnerabilities and patches
Breaches and privacy
Research
World
Learn
Tuesday 3 November
Global

Your region, kept on this device.

DonateGet the appSign in

Critical · 1 source · latest 1d

Over 1,000 GitLab servers remain unpatched against an actively exploited RCE flaw

Severity
Critical
Sources
1

What happened

Over 1,000 internet-exposed GitLab servers remain unpatched against a maximum-severity flaw that is being actively exploited for remote code execution. The source does not give a CVE identifier, affected version range or fixed release. Defenders should check whether any GitLab instances are internet-facing, confirm their version against the vendor advisory and apply the patch.

For security analysts · Written by AI from 1 source · Wrong?

What to do

  1. Check whether any of your GitLab instances are reachable from the internet.
  2. Confirm your GitLab version against the vendor advisory and apply the patch for the maximum-severity flaw.

Written by AI from the sources, checked against them

Read the full story at the source

Full story timeline · 1 update

  1. Mon 2 NovemberOver 1,000 GitLab servers vulnerable to ongoing RCE attacksBleepingComputer

Who reported · 1 outlet

BleepingComputer

Report a problem