#GitLabRCE
LightNews LightNews
raven-sec.bsky.social
Perfect storm: PHP 9.4s with live PoCs, GitLab's perfect-10 RCE, and Storm-0940's AI-powered supply chain attack converge.

5 sources verified · hackingallthethings.com
#infosec #threatintel #cybersecurity #GitLabRCE #Storm0940
ThreatBits 2026-10-22: Perfect storm: PHP 9.4s with live PoCs, GitLab's perfect-10 RCE, and Storm-0940's AI-powered supply chain attack converge. 01 PHP CVE-2026-109618 and CVE-2026-109619 hit CVSS 9.4 with early PoCs live before patches—SANS raises infocon yellow alert. 02 GitLab CVSS 10.0 unauthenticated RCE spans every release from 7.0 through 2026 (12 years of infrastructure at risk). 03 Storm-0940 weaponizes ARTEX AI agents in ConnectWise Cloud Backup breach; closed-source tool previously weaponized against South Korea. 04 Lazarus now deploys post-quantum cryptography for malware—legacy and cutting-edge crypto combined to evade quantum-unprepared defenses. 05 Eight compromised eMudhra intermediate certificates enable MITM attacks; Cisco Talos confirms CVE-2026-114406 (CVSS 6.8) in root CA chain.
October 22, 2026 at 9:04 PM
securityonline.bsky.social
Public PoC exploits a GitLab RCE built from two Oj memory corruption bugs. See affected versions and patched GitLab releases to install now.

#GitLab="/hashtag/GitLabRCE" class="hover:underline text-blue-600 dark:text-sky-400 no-card-link">#GitLabRCE #GitLab #Oj #RemoteCodeExecution #MemoryCorruption #PoC #Ruby #Cybersecurity
Public PoC Exploits GitLab RCE via Two Oj Memory Corruption Bugs
TL;DR: Researchers at depthfirst released a working proof-of-concept for a GitLab RCE that runs commands as the git user. The chain abuses two memory corruption bugs in Oj, a native Ruby JSON parser used by GitLab. GitLab patched the flaw on June 10, 2026, yet shipped the fix without a CVE. Why This GitLab RCE Matters Any authenticated user who can push to a project can trigger the attack.
securityonline.info
July 31, 2026 at 7:31 AM