Security Feed
See the latest insights and analysis from our MDR team.
RSS for SlackCVE-2026-93577, CVE-2026-89078
By Yoav Nesher |
24 September 2026
CVE-2026-93577, CVE-2026-89078 – GitLab CE/EE CI/CD regex parsing flaws enable authenticated server-side RCE
GitLab CE/EE has CI/CD configuration regex handling bugs (integer overflow during compilation and double free during parsing) that can let an authenticated user trigger arbitrary code execution on the GitLab server via a specially crafted regular expression. Affects `19.2