Warning: Critical Remote Code Execution Vulnerabilities in GitLab, Patch Immediately!

**GitLab critical patch release (19.4.1 / 19.3.3 / 19.2.7) addressing two RCEs and multiple other vulnerabilities**: On 24 Sep 2026 GitLab released fixes for two critical CI regular-expression vulnerabilities (CVE-2026-89078 and CVE-2026-93577, both CVSS 9.9) that allow authenticated remote code execution, along with XSS, authorization bypasses and information-disclosure flaws across versions 19.2.0–19.4.0; administrators are urged to apply the patched releases immediately and augment detection/response as historic compromise may not be remediated by patching alone.