GitLab warns of max severity code execution vulnerability
2026-10-12T13:23:22Z•cbb978c2b4be27a50ccc0656db61e222b05f7ee36c16cc2611e862a30a47aede
CVE-2026-102255AI-agentsAhsayCBSCitrix-NetScalerClickFixGitLabGoogle-AdsQilinSMA1000ShinyHuntersSonicWallWindows-11active-exploitationcryptominingdata-breachend-of-supportmalwarephishingransomwareremote-code-executionvulnerabilitywebshell
What happened
BleepingComputer feed covering multiple cybersecurity developments, including actively exploited critical vulnerabilities in SonicWall SMA1000 and AhsayCBS, a maximum-severity GitLab CI/CD regex compiler RCE, a new critical Citrix NetScaler RCE, malware-related data exposure, ransomware and extortion investigations, phishing and ClickFix campaigns, and end-of-support notices for Windows 11 23H2 and other outdated Windows systems.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- cbb978c2b4be27a50ccc0656db61e222b05f7ee36c16cc2611e862a30a47aede
- Enrichment time
- 2026-10-12T13:23:22Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.