GitLab issues emergency patch for critical code-injection flaw

Reports

2

Domains carrying it

2

First reported

18 August 2026

Latest report

19 August 2026

◆ Sectors

◆ Timeline

1. 18 August 2026GitLab issues emergency patch for critical code-injection flawcybersecuritydive.com
2. 19 August 2026Critical GitLab flaw lets hackers delete or rewrite repositories – patch nowcybernews.com

◆ Connected developments

Situations Wire finds semantically close to this one. Proximity, not cause.

• Microsoft confirms maximum severity flaw in Entra ID targeted for exploitation3 reports · 3 domains · 22 August 2026
• Critical Zimbra RCE flaw now actively exploited in attacks3 reports · 2 domains · 24 August 2026
• WordPress Core "wp2shell" RCE flaws get public exploits, patch now2 reports · 2 domains · 22 July 2026
• CISA Warns of Check Point Authentication Vulnerability Actively Exploited in the Wild4 reports · 4 domains · 24 July 2026
• High-Severity Vulnerability in Zimbra Collaboration Suite2 reports · 2 domains · 21 August 2026
• Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw4 reports · 4 domains · 28 July 2026

◆ Share

◆ Evidence

2 reports · 2 domains

• Critical GitLab flaw lets hackers delete or rewrite repositories – patch nowcybernews.com · 19 August 2026
• GitLab issues emergency patch for critical code-injection flawcybersecuritydive.com · 18 August 2026