What's Getting Pwned

A critical unauthenticated remote code execution vulnerability in GitLab (CVE-2026-110264) was patched on October 21, affecting all self-managed versions since 2014. Additionally, unpatched Linux kernel vulnerabilities with full technical details were accidentally leaked to public mailing lists, including two critical ksmbd remote code execution bugs, and the LiteLLM Python package was compromised on PyPI and Docker repositories to steal credentials and enable remote code execution.