Max-severity GitLab bug allows remote code execution over 12 years of releases
2026-10-22T19:23:52Z•0a96635b87fe89dba8905a99bcd594c94405816c80a5af8a563cc32ff73cd646
AI securityChinese cyber espionageConnectWiseGitLabLinux KVMLiteLLMPHP2ShellPalo Alto NetworksRATTLS certificatesaccount takeoveractive exploitationcertificate authority compromisecloud securitycredential theftcritical infrastructuredata breacheMudhraguest escapephishingprompt injectionransomwareremote code executionsupply chain attackweb application security
What happened
A security-news feed covering major vulnerability disclosures, active exploitation, supply-chain attacks, certificate-authority compromise, ransomware, cloud breaches, data-protection incidents, and AI-enabled threats. The most severe items include a max-severity GitLab remote-code-execution flaw spanning many releases, active exploitation of the PHP2Shell vulnerability, a critical Linux KVM guest-to-host escape, and compromises affecting ConnectWise, LiteLLM, eMudhra, and Palo Alto firewall environments. Specific CVE identifiers are not provided in the document.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- theregister_security
- Record identifier
- 0a96635b87fe89dba8905a99bcd594c94405816c80a5af8a563cc32ff73cd646
- Enrichment time
- 2026-10-22T19:23:52Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.