A Decade of Exposure: GitLab Patches Critical CVSS 10.0 Flaw Affecting 12 Years of Code
GitLab has addressed a severe vulnerability, identified as CVE-2026-110264, which carries a maximum CVSS score of 10.0. This flaw allows unauthenticated remote code execution (RCE) on self-managed GitLab instances. The vulnerability is particularly alarming as it traces back to version 7.0, impacting software releases spanning the last 12 years. Organizations are urged to update their self-managed installations immediately to protect against potential exploits that require no user interaction or authentication.