VulncastBriefing archive

Daily Brief - 2026-10-23

· 5 vulnerabilities · 6 min listen

▶ Listen to this briefing

CVE-2026-110264

critical · CVSS 10 · GitLab CE/EE

An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server due to integer overflow when compiling a specially crafted regular expression.

  • Remote Code Execution
  • Integer Overflow
  • web application
  • devops platform

CVE-2026-114625

critical · CVSS 9.9 · VMware VeloCloud Orchestrator

VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator. On an affected system, any authenticated user can gain operator privileges and masquerade as a local "superuser operator" user. This includes access to functionality that is intended for internal use only and which is not intended to be remotely accessible. Hosted, including Dedicated, versions of VCO were impacted and have already been patched.

  • Privilege Escalation
  • Broken Access Control
  • sd-wan
  • cloud infrastructure

CVE-2026-114640

high · CVSS 8.7 · Traefik

Traefik from v3.7.0 before v3.7.14 contains an authentication bypass vulnerability in its Kubernetes Ingress-NGINX provider that forwards client-supplied Ssl-Client-* headers on the plaintext HTTP router. When ssl-redirect is disabled alongside auth-tls-pass-certificate-to-upstream, unauthenticated attackers can send Ssl-Client-Verify: SUCCESS with a chosen certificate subject and issuer to impersonate mTLS identities.

  • Authentication Bypass
  • proxy
  • api gateway
  • kubernetes

CVE-2026-96355

critical · CVSS 9.1 · Drupal Webform

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Webform allows Code Injection. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

  • Code Injection
  • web application
  • php

CVE-2026-97785

critical · CVSS 10 · Microsoft AAD App Proxy

Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network.

  • Improper Authentication
  • Privilege Escalation
  • web application
  • access management