🚨 CRITICAL: GitLab flaw (CVSS 10.0) affects 12 years of releases.
CVE-2026-110264 could allow unauthenticated remote code execution on self-managed servers.
Read - thehackernews.com/2026/10/critic…
CVE-2026-110264 could allow unauthenticated remote code execution on self-managed servers.
Read - thehackernews.com/2026/10/critic…
Oct 21, 2026 · 6:58 PM UTC
263
2,853
14,894
3,524,482
@TheHackersNews 12 years means it survived every single rewrite.
3
0
445
51,097
@TheHackersNews Looks like I picked the wrong week to stop sniffing glue.
14
59
3,862
159,712
I think that in the very near future we will see a full-scale cyberwar, where swarms of agents will scour the internet and hack poorly secured websites and servers (either to steal information or to recruit them into a botnet).
It is critically important to understand this right in advance: patch old vulnerabilities you never got around to, restrict unnecessary access, remove "cool" browser and code editor extensions and so on.
The winds of change are blowing and they will affect everyone☝️ Ultimately, everything will become more secure and optimized, but there will be chaos for a while and it is in your best interest to survive it with minimal losses.
4
6
331
48,293
@TheHackersNews Stay safe out there. In case of an emergency, pull the Ethernet cable. #hugops
1
1
32
12,643
@TheHackersNews Today is a day im glad i do not work at a SOC my fucking god what else js gonna have some backdoor next or somthing.
0
1
48
13,336
@TheHackersNews This is the sonic boom. The number of bugs in old software is finite and being uncovered in the following days and there won't be security holes in future written software
5
0
68
14,602
@TheHackersNews Today starts to look like an attack on all SRE
0
2
135
41,699
@TheHackersNews All the sysadmins around the world that were fired to be replaced by WITCH indian outsourcing watching the situation unfold right now from their couch
0
0
3
612
@TheHackersNews Not right now GitLab, there’s other problems at hand!
0
0
26
16,497
@TheHackersNews its misleading how it says unauthenticated. The request ITSELF is unauth, BUT the payload must be on the server already, which to upload requires you to have an account
0
0
1
3,514
@TheHackersNews hey @max_spero_ they stole your guys' logo
1
0
3
4,462
@TheHackersNews What have cybersecurity “experts” been doing all this time?
1
0
1
1,370
@TheHackersNews Wtf is happening? After that PQC company, PHP, NodeJS and now GitLab?
0
0
4
5,364
@TheHackersNews twelve years of releases and this is what theyre banking on patching by tuesday
1
0
1
3,856
@TheHackersNews @grok i’m an idiot can u explain this all to me why is this bad
1
0
1
434
@TheHackersNews I was literally just about to move my stuff off GitHub to gitlab due to GitHubs instability. guess maybe I won't do that
3
0
9
6,290
@TheHackersNews I’m cutting my workplace server cables with shears
0
0
0
758
@TheHackersNews At least we'll all be up-to-date 😂.
I'm hoping we change the Internet model from "trust everyone" to "trust only trusted" or something to improve the situation.
Even if there's an RCE, if only certain folks can access your stuff, you're at a lower risk level.
But it sucks.
I'm hoping we change the Internet model from "trust everyone" to "trust only trusted" or something to improve the situation.
Even if there's an RCE, if only certain folks can access your stuff, you're at a lower risk level.
But it sucks.
0
0
0
354
@ThePHPF I think it’s about time to EOL PHP entirely already, and you know it. The world deserves better than that. Just sunset it.
1
0
4
5,923
@TheHackersNews Let’s plug the shelved ai models back in to solve it.
0
0
4
6,543
