CTI · reviewed · 2026-09-27

CVE-2026-89078 and CVE-2026-93577: GitLab CE/EE contain a double free and an integer overflow that let an authenticated user run arbitrary c

Full story & timeline

MITRE ATT&CK

• T1190 Exploit Public-Facing Application Initial Access

Indicators

No curated indicators tied to this case.

Detections

No detection content yet — case analysis did not yield signal-specific telemetry. Check back after the next daily CTI pass.

References

• https://www.cve.org/CVERecord?id=CVE-2026-89078
• https://securityonline.info/gitlab-critical-patch-release-rce/?utm_source=mastodon&utm_medium=jetpack_social
• https://beyondmachines.net/event_details/gitlab-patches-critical-regex-flaws-allowing-remote-code-execution-8-p-7-q-t/gD2P6Ple2L