certeu-2026-016
certeu
Description
On 12 October 2026, GitLab released versions 19.4.2, 19.3.4 and 19.2.8 of GitLab Community Edition (CE) and Enterprise Edition (EE), fixing 24 security issues among which a critical vulnerability that could allow an unauthenticated attacker to execute arbitrary code on the server.<br> CERT-EU strongly recommends upgrading self-managed GitLab CE/EE instances to a fixed version as soon as possible, starting with internet-facing instances.<br>
Timeline
- Published
- Mon, 12 Oct 2026 14:57:02 CEST
- Last Modified
- Mon, 12 Oct 2026 14:57:02 CEST
CVSS Details
CVSS details not available.
Affected Products
No product information available.
References
No references available.
Linked Vulnerabilities
No linked vulnerabilities found.
{
"datePublished": "Mon, 12 Oct 2026 14:57:02 CEST",
"description": "On 12 October 2026, GitLab released versions 19.4.2, 19.3.4 and 19.2.8 of GitLab Community Edition (CE) and Enterprise Edition (EE), fixing 24 security issues among which a critical vulnerability that could allow an unauthenticated attacker to execute arbitrary code on the server.<br>\nCERT-EU strongly recommends upgrading self-managed GitLab CE/EE instances to a fixed version as soon as possible, starting with internet-facing instances.<br>",
"id": "CERTEU-2026-016",
"link": "https://cert.europa.eu/publications/security-advisories/2026-016/",
"source": "certeu",
"title": "2026-016: Critical Vulnerability in GitLab CE and EE"
}