01
Security
GitLab patches maximum-severity code execution flaw in its regex compiler
Self-managed administrators on the affected releases need to upgrade, since over 2,700 Community Edition instances are publicly visible.
Self-managed administrators on the affected releases need to upgrade, since over 2,700 Community Edition instances are publicly visible.
The flaw can let unauthenticated attackers run commands on affected appliances, and fixed Connect Secure builds are now available.
More than 400 SMA1000 appliances are visible online, leaving exposed systems under active attack attempts.
The issues affect Nexus switches when NX-API, NGOAM or MPLS OAM are enabled, so operators should treat them as urgent even with no workaround.
Admins running affected Kiteworks Email Protection Gateway versions now need to patch to restore a secure baseline and re‑expose systems with more confidence.
Organizations running affected appliances can now patch them and check for signs of compromise.
Live attacks on the widely exposed Roundcube webmail platform raise the urgency of patching or disabling the vulnerable plugin.
Admins of BIG-IP APM and VeloCloud Orchestrator must move quickly as both zero-days are under active attack and already flagged by CISA.