Ruby security update 4.0.9, 3.4.12 and 3.3.13 fixes Onigmo regex bugs behind GitLab RCE flaws CVE-2026-110264 and CVE-2026-97229. Upgrade now.

Related Posts:

• Electrum Wallet Vulnerability Exploits RBF Fee Bumps
• Storybook Fixes CVSS 9.4 Dev Server Flaw That Lets Malicious Sites Inject Code
• Microsoft Ships Out-of-Band .NET Updates for Brotli Overflow and Linux Tarball Flaws

The post Ruby Fixes Onigmo Regex Bugs Behind Critical GitLab RCE Flaws appeared first on Daily CyberSecurity.

Technical details and PoC exploit code for CVE-2026-97229, a CVSS 10.0 GitLab RCE vulnerability exposing 25,766 hosts, are now public. Patch to 19.4.2 now.

Related Posts:

• Critical Nextcloud Collabora Online Flaw CVE-2026-110447 Actively Exploited in the Wild to Deploy Webshells
• Public PoC Exploit Code and Technical Details Disclosed for CVE-2026-74580 Linux vhost Vulnerability (Vghost)
• CERT/CC Warns of Critical CVE-2026-110005 OS Command Injection in Komodo Periphery Agent

The post Public PoC Exploit Disclosed for CVSS 10.0 GitLab Remote Code Execution Flaw CVE-2026-97229 Affecting 25,766 Hosts appeared first on Daily CyberSecurity.

A GitLab critical vulnerability, CVE-2026-97229 (CVSS 10.0), allows unauthenticated arbitrary code execution. Upgrade to GitLab 19.4.2 now.

Related Posts:

• MariaDB Patches Nine Vulnerabilities Enabling Privilege Escalation and Code Execution
• NVIDIA DCGM Exporter Flaw CVE-2026-47483 Lets Attackers Crash GPU Monitoring
• AnyDesk RCE Vulnerability Details and PoC Exploit Code Publicly Disclosed

The post GitLab Patches CVE-2026-97229 (CVSS 10.0) Flaw That Lets Unauthenticated Attackers Execute Arbitrary Code appeared first on Daily CyberSecurity.

GitLab AI Gateway vulnerability CVE-2026-90970 (CVSS 9.9) lets Duo Agent Platform users run commands. Upgrade self-hosted gateways now.

Related Posts:

• Citrix NetScaler CVE-2026-88779 Exploited in the Wild to Knock SAML Gateways Offline
• Unpatched Apache OpenOffice Vulnerability Leads New Apache Advisories for LDAP API and Traffic Server
• Microsoft Reissues September 2026 Exchange Server Security Updates to Add CVE-2026-96940

The post GitLab Patches Critical AI Gateway Flaw That Lets Duo Users Run Commands appeared first on Daily CyberSecurity.

A GitLab critical patch release addresses two CVEs enabling a GitLab RCE vulnerability. Update your CI/CD pipelines to prevent arbitrary code execution.

Related Posts:

• Ansible Automation Platform Vulnerabilities Allow Exploits
• CVE-2026-48842: Roundcube Webmail Vulnerability Exploited in the Wild
• Critical Rancher XSS Vulnerability Exposes Admin Credentials

The post GitLab Critical Patch Release Fixes Severe RCE Flaws appeared first on Daily CyberSecurity.