Cicd
CVE-2026-110264: CVSS 10 Unauthenticated RCE in Self-Managed GitLab Reaches Back to Version 7.0
GitLab patched a maximum-severity unauthenticated code-execution flaw in self-managed CE and EE, caused by an integer overflow in regex compilation and present in every release since 2014.
CVE-2026-97229: Maximum-Severity Integer Overflow in GitLab's CI/CD Regex Compiler Allows Code Execution
GitLab patched a CVSS 10.0 integer overflow in the CI/CD regular expression compiler that lets a crafted pipeline expression execute code on self-managed servers.
CVE-2026-85706: Unauthenticated CVSS 10 Path Traversal in GitLab's Commits API Under Active Probing
A maximum-severity, unauthenticated path traversal in GitLab's repository commits API lets attackers read arbitrary server files; CISA added it to KEV and honeypots logged probing within hours of the patch.
CVE-2026-63077: Unauthenticated RCE in JetBrains TeamCity via the Agent Polling Protocol
A deserialization flaw in TeamCity's agent polling protocol lets anyone with network access to the server run arbitrary OS commands with no login required — a direct hit on the CI/CD pipeline and everything it builds.
GitLab RCE PoC: Any Project Pusher Can Run Commands as Git via Notebook Diff Rendering
Researchers at depthfirst published working exploit code for an unfiled GitLab RCE: a two-bug chain in the Oj JSON parser behind Jupyter notebook diff rendering lets any user who can push to a project run commands as git on unpatched self-managed instances.