GitLab Alert: High-Severity 2FA Bypass & DoS Flaws Patched in Urgent Update

GitLab released an urgent security update for Community and Enterprise editions (target versions 18.8.2, 18.7.2, 18.6.4) fixing five high-severity CVEs — notably CVE-2026-0723, a CVSS 7.4 two-factor authentication bypass that could allow account takeover with knowledge of a credential ID, and multiple denial-of-service flaws affecting APIs, Jira Connect, Wiki handling, and SSH requests; administrators are strongly urged to upgrade immediately to mitigate potential account compromises and instance crashes.