Multiple GitLab Vulnerabilities Enables 2FA Bypass and DoS Attacks

GitLab released critical patches for multiple vulnerabilities across versions 18.6–18.8 (and other ranges) affecting both Community and Enterprise editions. The most severe is CVE-2026-0723, an unchecked return value in authentication that permits 2FA bypass via forged device responses; additional high-severity issues include DoS and incorrect authorization flaws (CVE-2025-13927, CVE-2025-13928). Administrators of self-managed instances are urged to apply updates immediately (GitLab.com and Dedicated customers are already protected) and follow post-deploy migration guidance to avoid downtime.