Stories
Vulnerability
Stories curated for Vulnerability
Tech News
GitLab Races to Patch CVSS 10.0 Flaw That Let Unauthenticated Attackers Run Server Code
GitLab has shipped emergency patches for CVE-2026-97229, a maximum-severity CVSS 10.0 flaw in its CI/CD regular expression compiler that could allow unauthenticated remote code execution on self-managed servers. Rapid7 has independently confirmed working exploitation, making urgent upgrades essential.
Cybersecurity
CISA Warns of Active Exploitation in BeyondTrust Remote Support
CVE-2026-102764 affects self-hosted BeyondTrust Remote Support versions through 26.2.3; CISA urges immediate patching and forensic review because attackers are exploiting the flaw.