GitLab has patched a high-severity two-factor authentication bypass impacting community and enterprise editions of its software development platform. Tracked as CVE-2026-0723, this vulnerability stems ...
The release also includes medium-severity flaws that broaden the risk picture for organisations running their own GitLab infrastructure. GitLab said CVE-2026-1403 could allow an authenticated user ...
CISA warned today that attackers are actively exploiting a maximum-severity GitLab vulnerability that allows them to take over accounts via password resets. GitLab hosts sensitive data, including ...