Hvězdička u CVE znamená, že jsem to číslo vytáhl z širšího textu článku. Neukazuju u něj proto KEV, EPSS ani CVSS, a to preventivně, protože článek se na něj mohl jen odkazovat, třeba jako na starší kauzu.
Over 1,000 Internet-exposed GitLab servers are still unpatched against a maximum-severity flaw actively exploited in remote code execution attacks. [...]
CVE-2026-0723 * CVE-2026-110264 * CVE-2026-85706 * CVE-2026-97229 * GitLab US
Hackers attempted to exploit a critical GitLab vulnerability in Alpine Linux's development infrastructure on October 20-21, prompting the open-source project to rebuild its GitLab server and reset all passwords over concerns of a possible compromise. [...]
KEV ✓ EPSS 0.27 CVSS 10.0 CVE-2026-97229 Alpine Linux GitLab US CZ NL
Attackers have started exploiting a maximum-severity GitLab vulnerability patched earlier this month, according to the US Cybersecurity and Infrastructure Security Agency (CISA). [...]
CVE-2021-22175 * CVE-2021-39935 * CVE-2026-0723 * CVE-2026-110264 * CVE-2026-85706 * CVE-2026-97229 * GitLab US
Une vulnérabilité a été découverte dans les produits GitLab. Elle permet à un attaquant de provoquer un contournement de la politique de sécurité.
EPSS 0.00 CVE-2026-111943 GitLab eMudhra Mozilla Microsoft Google Apple FR US
On October 29, 2026, we released versions 19.5.3, 19.4.5, 19.3.7, 19.2.10, 19.1.10, 19.0.11, 18.11.14 for GitLab Community Edition and Enterprise Edition. These versions resolve a number of regressions and bugs. This patch release does not include any security fixes. GitLab Community Edition and Enterprise Edition 19.5.3 [Backport 19.5] Distrust compromised eMudhra CA certificates Bump Go to 1.27.3 [19.5] Backport Ruby ISEQ and imemo_env Copy-on-Write GC fixes for 3.3 Backport of ‘Stop jobs…
GitLab US
For the latest discoveries in cyber research for the week of 26th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Japanese cloud hosting provider Onamae Desktop Cloud has confirmed a cyberattack in which intruders compromised its infrastructure and installed malware on customer servers. More than 26,000 servers were potentially affected. The provider began shutting down customer environments on October 21 to contain the intrusion and prevent further…
KEV ✓ EPSS 1.00 CVSS 10.0 CVE-2026-109618 CVE-2026-109619 CVE-2026-110264 CVE-2026-114625 CVE-2026-115560 LiteLLM Oracle GitLab Arista IL
DESCRIERE În data de 21.10.2026, GitLab a publicat actualizările de securitate 19.5.1, 19.4....
GitLab RO
Gitlab har publicerat säkerhetsuppdateringar för en ny sårbarhet, CVE-2026-110264. Sårbarheten har fått en CVSS-klassning på 10.0 och kan utnyttjas av en oautentiserad användare för att köra godtycklig kod. [1][2] GitLab har rättat sårbarheterna i följande versioner av GitLab Community Edition (CE) och Enterprise Edition (EE): 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, 18.11.13.
EPSS 0.01 CVE-2026-110264 GitLab SE
Serial Number: AV26-1074 Date: October 22, 2026 As of October 21, 2026, GitLab is affected by vulnerabilities in the following product: GitLab Community Edition (CE) and Enterprise Edition (EE) Prior to 18.11.13 Prior to 19.0.10 Prior to 19.1.9 Prior to 19.2.9 Prior to 19.3.6 Prior to 19.4.3 Prior to 19.5.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. GitLab Critical Patch Release: 19.5.1, 19.4.3,…
GitLab CA
GitLab has released security patches for a maximum-severity Regular Expression Compiler flaw that can let remote attackers run arbitrary code on vulnerable servers. [...]
CVE-2026-110264 * CVE-2026-85706 * CVE-2026-97229 * GitLab US
On 21 October 2026, GitLab published a security advisory addressing several vulnerabilities among which a critical flaw that could allow an unauthenticated user to execute arbitrary code on a GitLab server. CERT-EU recommends organisations to update affected assets as soon as possible, prioritising internet facing assets, and to run an assessment to identify compromised assets.
GitLab EU
GitLab heeft 12 kwetsbaarheden verholpen in GitLab Community Edition (CE) en Enterprise Edition (EE). Eén kwetsbaarheid is als kritiek aangemerkt. GitLab heeft een kwetsbaarheid verholpen in GitLab Community Edition en Enterprise Edition binnen de versies vanaf 7.0 tot bepaalde 19.x releases. De kwetsbaarheid met kenmerk CVE-2026-110264 heeft een CVSS-score van 10,0 en betreft een integer overflow bij het compileren van een speciaal vervaardigde reguliere expressie. Onder bepaalde…
EPSS 0.01 CVE-2026-110264 CVE-2026-112212 CVE-2026-15723 GitLab NL IT
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: CVE-2026-110264, CVE-2026-15723, CVE-2026-112212, CVE-2026-12664, CVE-2026-16255, CVE-2026-105777, CVE-2026-13319, CVE-2026-112378, CVE-2026-105711, CVE-2026-14288, CVE-2026-112326, CVE-2026-103515, Summary: On October 21, 2026, we released versions 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, 18.11.13 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain…
EPSS 0.01 CVSS 10.0 CVE-2026-103515 CVE-2026-105711 CVE-2026-105777 CVE-2026-110264 CVE-2026-112212 CVE-2026-112326 CVE-2026-112378 CVE-2026-12664 CVE-2026-13319 CVE-2026-14288 CVE-2026-15723 CVE-2026-16255 GitLab FI FR US
For the latest discoveries in cyber research for the week of 19th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES CenterPoint Energy, a US utility company serving Texas and several other states, has disclosed a data breach affecting more than 1 million Texas residents. Unauthorized access to an external system exposed names, addresses, Social Security information, and driver’s license numbers, according to regulatory notifications filed by the company. Burger…
KEV ✓ · ransomware EPSS 0.94 CVSS 10.0 CVE-2025-8088 CVE-2026-102764 CVE-2026-104935 CVE-2026-35029 CVE-2026-59823 CVE-2026-96951 CVE-2026-97229 Microsoft Ivanti GitLab BeyondTrust IL
Serial number: AV26-1028 Date: October 13, 2026 As of October 12, 2026, GitLab is affected by vulnerabilities in the following product: GitLab Prior to 19.2.8 Prior to 19.3.5 Prior to 19.4.2 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. GitLab Critical Patch Release: 19.4.2, 19.3.5, 19.2.8 GitLab release notes | GitLab Docs
GitLab CA
GitLab har publicerat säkerhetsuppdateringar för flera sårbarheter i GitLab Community Edition (CE) och Enterprise Edition (EE). [1]
GitLab SE
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 10.0, CVEs: CVE-2026-97229, CVE-2026-92883, CVE-2026-16301, CVE-2026-14814, CVE-2026-81839, CVE-2026-96893, CVE-2026-101168, CVE-2026-7767, CVE-2026-16275, CVE-2026-84284, CVE-2026-85529, CVE-2026-100755, CVE-2026-14552, CVE-2026-6567, CVE-2026-104661, CVE-2026-14210, CVE-2026-105458, CVE-2026-5954, CVE-2026-92528, CVE-2026-78335 (+4 other associated CVEs), Summary: On October 12, 2026, we released…
CVSS 10.0 GitLab FI
GitLab warned users today to immediately patch a maximum-severity vulnerability in the CI/CD Regular Expression Compiler that could let remote attackers run arbitrary code on targeted instances. [...]
On 12 October 2026, GitLab released versions 19.4.2, 19.3.4 and 19.2.8 of GitLab Community Edition (CE) and Enterprise Edition (EE), fixing 24 security issues among which a critical vulnerability that could allow an unauthenticated attacker to execute arbitrary code on the server. CERT-EU strongly recommends upgrading self-managed GitLab CE/EE instances to a fixed version as soon as possible, starting with internet-facing instances.
GitLab EU
Rilasciati aggiornamenti di sicurezza che risolvono 24 vulnerabilità, di cui 1 con gravità “critica” e 5 con gravità “alta”, in GitLab Community Edition (CE) ed Enterprise Edition (EE). Tali vulnerabilità, qualora sfruttate, potrebbero consentire ad un utente malintenzionato, in determinate condizioni, di eseguire codice arbitrario, eludere dei meccanismi di sicurezza e accedere ad informazioni sensibili sui sistemi interessati.
KEV ✓ EPSS 0.27 CVE-2026-14814 CVE-2026-16301 CVE-2026-81839 CVE-2026-92883 CVE-2026-96893 CVE-2026-97229 GitLab IT
De multiples vulnérabilités ont été découvertes dans GitLab. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
KEV ✓ EPSS 0.27 CVSS 10.0 a dalších 7 CVE-2026-14552 CVE-2026-14814 CVE-2026-16275 CVE-2026-16301 CVE-2026-5954 CVE-2026-6567 CVE-2026-7767 CVE-2026-78335 CVE-2026-81839 CVE-2026-82632 CVE-2026-84284 CVE-2026-85529 CVE-2026-92528 CVE-2026-9268 CVE-2026-92883 CVE-2026-96893 CVE-2026-97229 GitLab FR US
For the latest discoveries in cyber research for the week of 5th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Arizona’s state court system has suffered a phishing-led cyberattack after an employee clicked a malicious link. Attackers copied backup files containing protective-order records and more than 150,000 Foster Care Review Board reports dating back to 2010, exposing personal and case-related information belonging to current and former participants.…
KEV ✓ EPSS 0.82 CVSS 9.9 CVE-2026-76504 CVE-2026-86950 CVE-2026-88771 CVE-2026-88772 CVE-2026-90970 Citrix Cisco Apple GitLab IL
Rilasciati aggiornamenti di sicurezza per risolvere una vulnerabilità con gravità “critica” che interessa GitLab AI Gateway. Tale vulnerabilità, qualora sfruttata, potrebbe consentire a un utente autenticato malevolo di eseguire codice arbitrario sui sistemi interessati.
EPSS 0.17 CVSS 9.9 CVE-2026-90970 GitLab IT FR FI US
Serial Number: AV26-994 Date: October 2, 2026 As of October 2, 2026, GitLab is affected by a vulnerability in the following product: GitLab AI Gateway Prior to 19.2.4 Prior to 19.3.2 Prior to 19.4.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. GitLab AI Gateway Critical Patch Release: 19.2.4, 19.3.2, and 19.4.1 GitLab release notes | GitLab Docs
GitLab CA
GitLab warned customers today to immediately patch a critical AI Gateway vulnerability that could let attackers run arbitrary commands on vulnerable instances. [...]
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.9, CVEs: CVE-2026-89078, CVE-2026-93577, CVE-2026-84739, CVE-2026-92470, CVE-2026-92874, CVE-2026-92530, CVE-2026-8937, CVE-2026-92529, CVE-2026-10518, CVE-2026-4523, CVE-2026-92628, Summary: On September 23, 2026, we released versions 19.4.1, 19.3.3, 19.2.7 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes, and we strongly recommend…
EPSS 0.01 CVSS 9.9 CVE-2026-10518 CVE-2026-4523 CVE-2026-84739 CVE-2026-89078 CVE-2026-8937 CVE-2026-92470 CVE-2026-92529 CVE-2026-92530 CVE-2026-92628 CVE-2026-92874 CVE-2026-93577 GitLab FI FR
De multiples vulnérabilités ont été découvertes dans GitLab. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données et un contournement de la politique de sécurité. Gitlab indique que la vulnérabilité CVE-2026-85706 est activement exploitée.
KEV ✓ EPSS 0.97 CVE-2026-85706 GitLab veřejná správa FR CZ NL CA US
Serial number: AV26-962Date: September 25, 2026 As of September 23, 2026, GitLab is affected by vulnerabilities in the following product: GitLab Prior to 19.2.7 Prior to 19.3.3 Prior to 19.4.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. GitLab Critical Patch Release: 19.4.1, 19.3.3, 19.2.7 GitLab release notes | GitLab Docs
GitLab CA
Private GitLab email addresses that allow developers to push issues or tasks to a project are being deliberately exposed in READMEs, contributing guides, and support pages used to collect bug reports. [...]
GitLab US
Rilasciati aggiornamenti di sicurezza che risolvono 7 vulnerabilità, di cui una con gravità “alta” e 2 con gravità “critica”, in GitLab Community Edition (CE) ed Enterprise Edition (EE). Tali vulnerabilità, qualora sfruttate, potrebbero consentire a un utente malintenzionato di accedere ad informazioni riservate o eseguire codice arbitrario sui sistemi interessati.
EPSS 0.01 CVE-2026-89078 CVE-2026-92470 CVE-2026-93577 GitLab IT
GitLab gives you a private email address to create issues. If leaked, anyone who has it can push code, execute CI/CD jobs, and bypass IP restrictions across all of your public and private projects. Category: Research
GitLab BE
On September 23, 2026, we released versions 19.0.9 and 18.11.12 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions backport the fixes for two critical vulnerabilities, CVE-2026-85706 and CVE-2026-87719, that were originally patched in 19.3.2, 19.2.6, and 19.1.8 on September 10, 2026. These backports were made available outside of our standard maintenance policy so that self-managed administrators running 18.11 and 19.0 can apply the fixes without first completing a…
KEV ✓ EPSS 0.97 CVSS 10.0 CVE-2026-85706 CVE-2026-87719 GitLab US SE
On September 23, 2026, we released versions 19.4.1, 19.3.3, 19.2.7 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes, and we strongly recommend that all self-managed GitLab installations be upgraded to one of these versions immediately. GitLab.com is already running the patched version. GitLab Dedicated customers do not need to take action. GitLab releases fixes for vulnerabilities in patch releases. There are two types of…
EPSS 0.01 CVSS 9.9 CVE-2026-10518 CVE-2026-84739 CVE-2026-89078 CVE-2026-8937 CVE-2026-92470 CVE-2026-92529 CVE-2026-92530 CVE-2026-92874 CVE-2026-93577 GitLab US
For the latest discoveries in cyber research for the week of 14th Setpember, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES IDScan.net, a US identity verification provider, has disclosed a data breach after detecting unauthorized access on September 1. Exposed data included names and government identification numbers, while a criminal marketplace advertised a collection containing millions of identity documents, including driver’s licenses, associated with the…
KEV ✓ EPSS 0.99 CVSS 10.0 CVE-2026-67276 CVE-2026-72898 CVE-2026-81963 CVE-2026-85046 CVE-2026-85706 CVE-2026-85880 CVE-2026-86060 Microsoft GitLab MikroTik Anthropic IL
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are now exploiting a maximum-severity GitLab vulnerability in attacks. [...]
CVE-2021-22175 * CVE-2021-39935 * CVE-2026-85706 * GitLab US
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 10.0, CVEs: CVE-2026-85706, CVE-2026-87719, CVE-2026-88765, CVE-2026-79708, CVE-2026-78252, CVE-2026-13210, CVE-2025-14871, CVE-2026-1168, CVE-2024-11222, CVE-2026-12910, CVE-2026-82837, CVE-2026-19619, CVE-2026-86341, CVE-2026-86340, CVE-2026-7514, CVE-2026-8030, CVE-2026-16794, CVE-2026-3855, Summary: On September 10, 2026, we released versions 19.3.2, 19.2.6, 19.1.8 for GitLab Community Edition (CE)…
KEV ✓ EPSS 0.97 CVSS 10.0 a dalších 1 CVE-2025-14871 CVE-2026-1168 CVE-2026-12910 CVE-2026-13210 CVE-2026-16794 CVE-2026-19619 CVE-2026-3855 CVE-2026-7514 CVE-2026-78252 CVE-2026-79708 CVE-2026-8030 CVE-2026-82837 CVE-2026-85706 CVE-2026-86340 CVE-2026-86341 CVE-2026-87719 CVE-2026-88765 GitLab FI FR
Národné centrum kybernetickej bezpečnosti (NCKB) NBÚ varuje pred kritickými zraniteľnosťami v produktoch GitLab Community Edition (CE) a GitLab Enterprise Edition (EE). Uvedené zraniteľnosti možno zneužiť na získanie neoprávneného prístupu k citlivým údajom a úplné narušenie dôvernosti, integrity a dostupnosti systémov. Vývojári GitLab 10. septembra 2026 vydali bezpečnostné aktualizácie, ktoré opravujú až 18 zraniteľností, z ktorých 2 sú... The post VAROVANIE: Kritické zraniteľnosti GITLAB CE a…
GitLab SK
Aggiornamenti di sicurezza rilasciati per GitLab, nota piattaforma per la gestione del ciclo di sviluppo software e della collaborazione sui progetti, sanano alcune vulnerabilità, di cui 2 con gravità "critica" e 6 con gravità "alta"
KEV ✓ EPSS 0.97 CVSS 10.0 CVE-2025-14871 CVE-2026-1168 CVE-2026-13210 CVE-2026-78252 CVE-2026-79708 CVE-2026-85706 CVE-2026-87719 CVE-2026-88765 GitLab IT US
GitLab urged users on Thursday to patch their servers immediately against a maximum-severity path traversal vulnerability tracked as CVE-2023-2825. [...]
EPSS 0.72 CVE-2023-2825 GitLab US
Rilasciati aggiornamenti di sicurezza per risolvere due vulnerabilità con gravità “alta” che interessano GitLab AI Gateway. Tali vulnerabilità, qualora sfruttate, potrebbero consentire a un utente autenticato malevolo di accedere a informazioni sensibili sui sistemi interessati.
EPSS 0.00 CVE-2026-19889 CVE-2026-75871 GitLab IT
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 7.3, CVEs: CVE-2026-18252, CVE-2026-77801, CVE-2025-10903, CVE-2026-3035, CVE-2026-4398, CVE-2026-15387, CVE-2026-7487, Summary: On August 26, 2026, we released versions 19.3.1, 19.2.5, 19.1.7 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes, and we strongly recommend that all self-managed GitLab installations be upgraded to one of these…
EPSS 0.01 CVSS 8.7 CVE-2025-10903 CVE-2026-15387 CVE-2026-18252 CVE-2026-3035 CVE-2026-4398 CVE-2026-7487 CVE-2026-77801 GitLab FI FR US
Aggiornamenti di sicurezza GitLab sanano alcune vulnerabilità, di cui una con gravità "alta", presente in GitLab Enterprise Edition (EE), nota piattaforma per la gestione del ciclo di sviluppo del software. Tale vulnerabilità, qualora sfruttata, potrebbe consentire a un utente autenticato con privilegi di sviluppatore di eseguire codice arbitrario sui sistemi interessati.
EPSS 0.01 CVE-2026-18252 GitLab IT
For the latest discoveries in cyber research for the week of 24th August, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Latvia’s Road Traffic Safety Directorate (CSDD) has confirmed a breach affecting payment records of more than 1.2 million people – roughly two-thirds of the country’s population – as well as 200,000 organizations. The stolen data included identification numbers, license plates, payment amounts, dates and addresses. Attackers reportedly exploited a…
KEV ✓ · ransomware EPSS 0.46 CVSS 10.0 CVE-2026-12569 CVE-2026-19478 CVE-2026-19489 CVE-2026-19490 Snowflake Siemens GitLab Cisco zdravotnictví výroba a průmysl energetika vodárenství IL
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 8.5, CVEs: CVE-2026-10053, Summary: GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to achieve remote code execution due to a path traversal vulnerability in the package registry.
EPSS 0.01 CVSS 8.5 CVE-2026-10053 GitLab FI
Welcome to this week’s edition of the Threat Source newsletter. Hello friend. I’m Mick. This is my first Threat Source newsletter, so I should probably introduce myself before I start telling you all the things I think you should be paying attention to. With assistance from an unnamed LLM, my bio reads like this: Mick Baccio is a globally recognized security strategist with a career spanning offensive operations, threat intelligence, and national-level incident response. He currently advises…
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.4, CVEs: CVE-2026-19650, CVE-2026-19478, Summary: CVE-2026-19478 9.4 GitLab has remediated an issue that under certain conditions could allow an unauthenticated user to remotely modify or delete public projects and user data via a GraphQL directive. CVE-2026-19650 7.1 GitLab has remediated an issue that under certain conditions could have allowed an unauthenticated user to execute mutations via GET…
EPSS 0.02 CVSS 9.4 CVE-2026-19478 CVE-2026-19650 GitLab FI IT FR US
Serial Number: AV26-827Date: August 18, 2026 As of August 17, 2026, GitLab is affected by vulnerabilities in the following product: GitLab Prior to 18.11.11 Prior to 19.0.8 Prior to 19.1.6 Prior to 19.2.4 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. GitLab Critical Patch Release: 19.2.4, 19.1.6, 19.0.8, 18.11.11 | GitLab Docs GitLab release notes | GitLab Docs
GitLab CA
GitLab Inc. heeft kwetsbaarheden verholpen in GitLab Community Edition (CE) en Enterprise Edition (EE). De kwetsbaarheden bevinden zich in de GraphQL-implementatie van GitLab. Een eerste kwetsbaarheid maakte het mogelijk voor niet-geauthenticeerde gebruikers om via een GraphQL-directive ongeautoriseerde wijzigingen of verwijderingen uit te voeren op publieke projecten en gebruikersdata. Een tweede kwetsbaarheid stelde niet-geauthenticeerde gebruikers in staat om mutaties uit te voeren via GET…
GitLab NL
Serial Number: AV26-814Date: August 13, 2026 As of August 12, 2026, GitLab is affected by vulnerabilities in the following product: GitLab Prior to 19.0.6 Prior to 19.1.4 Prior to 19.2.2 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. GitLab Patch Release: 19.2.2, 19.1.4, 19.0.6 | GitLab Docs
GitLab CA
GitLab heeft meerdere kwetsbaarheden verholpen in GitLab Enterprise Edition (EE) en Community Edition (CE) versies variërend van 12.0 tot en met 19.2.2. De kwetsbaarheden betreffen verschillende aspecten van GitLab, waaronder onjuiste privilege-toewijzing waarbij gebruikers met een pending lidmaatschapsstatus onbedoeld permissies konden erven van custom rollen. Verder zijn er problemen met ontbrekende autorisatiecontroles op API-endpoints, waardoor gebruikers met ontwikkelaarsrollen toegang…
GitLab NL
Rilasciati aggiornamenti di sicurezza che risolvono 13 vulnerabilità, di cui 6 con gravità “alta”, in GitLab Community Edition (CE) ed Enterprise Edition (EE). Tali vulnerabilità, qualora sfruttate, potrebbero consentire a un utente malintenzionato remoto di elevare i propri privilegi, accedere a informazioni sensibili e/o eludere meccanismi di sicurezza sui sistemi interessati.
EPSS 0.01 CVE-2026-15216 CVE-2026-15217 CVE-2026-15423 CVE-2026-16494 CVE-2026-16627 CVE-2026-19228 GitLab IT
De multiples vulnérabilités ont été découvertes dans GitLab. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, un déni de service à distance et une atteinte à la confidentialité des données.
EPSS 0.01 CVE-2025-9486 CVE-2026-15216 CVE-2026-15217 CVE-2026-15423 CVE-2026-16494 CVE-2026-16627 CVE-2026-18244 CVE-2026-18433 CVE-2026-19228 CVE-2026-4879 CVE-2026-6821 CVE-2026-7427 CVE-2026-8667 GitLab FR
On August 12, 2026, we released versions 19.2.2, 19.1.4, 19.0.6 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes, and we strongly recommend that all self-managed GitLab installations be upgraded to one of these versions immediately. GitLab.com is already running the patched version. GitLab Dedicated customers do not need to take action. GitLab releases fixes for vulnerabilities in patch releases. There are two types of patch…
EPSS 0.01 CVSS 8.7 CVE-2026-10053 CVE-2026-15216 CVE-2026-15217 CVE-2026-15423 CVE-2026-16494 CVE-2026-16627 CVE-2026-19228 CVE-2026-6821 CVE-2026-7427 GitLab US
On August 6, 2026, we released versions 18.11.9 for GitLab Community Edition and Enterprise Edition. These versions resolve a number of regressions and bugs. This patch release does not include any security fixes. GitLab Community Edition and Enterprise Edition 18.11.9 We have pulled the omnibus install of 18.11.8 and replaced it with 18.11.9. A bug was found in the deprecation code that enabled Mattermost incorrectly. If you have a local cache of our omnibus package, you will want to remove 18…
GitLab US
On August 6, 2026, we released versions 18.11.9 for GitLab Community Edition and Enterprise Edition. These versions resolve a number of regressions and bugs. This patch release does not include any security fixes. GitLab Community Edition and Enterprise Edition 18.11.9 We have pulled the omnibus install of 18.11.8 and replaced it with 18.11.9. A bug was found in the deprecation code that enabled Mattermost incorrectly. If you have a local cache of our omnibus package, you will want to remove 18…
GitLab US
On July 29, 2026, we released versions 19.2.1, 19.1.3, 19.0.5 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes, and we strongly recommend that all self-managed GitLab installations be upgraded to one of these versions immediately. GitLab.com is already running the patched version. GitLab Dedicated customers do not need to take action. GitLab releases fixes for vulnerabilities in patch releases. There are two types of patch…
EPSS 0.01 CVSS 8.5 CVE-2026-12436 CVE-2026-13113 CVE-2026-14341 CVE-2026-15077 CVE-2026-15831 CVE-2026-15975 CVE-2026-16553 CVE-2026-3093 CVE-2026-6267 CVE-2026-6336 GitLab US
On July 8, 2026, we released versions 19.1.2, 19.0.4, 18.11.7 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes, and we strongly recommend that all self-managed GitLab installations be upgraded to one of these versions immediately. GitLab.com is already running the patched version. GitLab Dedicated customers do not need to take action. GitLab releases fixes for vulnerabilities in patch releases. There are two types of patch…
EPSS 0.00 CVSS 8.7 CVE-2025-12506 CVE-2026-11827 CVE-2026-13151 CVE-2026-13320 CVE-2026-6352 CVE-2026-6896 CVE-2026-7492 CVE-2026-8472 GitLab US
On July 1, 2026, we released version 18.8.11 for GitLab Community Edition and Enterprise Edition. These versions resolve regressions and bugs. This patch release does not include any security fixes. When database load balancing is in use, database connections may not be returned to the pool as a result of a regression caused by the upgrade to Rails 7.2. We are making an out-of-band patch release to ensure stability for customers upgrading to the required stop of GitLab 18.8. GitLab Community…
GitLab US
On July 1, 2026, we released version 18.8.11 for GitLab Community Edition and Enterprise Edition. These versions resolve regressions and bugs. This patch release does not include any security fixes. When database load balancing is in use, database connections may not be returned to the pool as a result of a regression caused by the upgrade to Rails 7.2. We are making an out-of-band patch release to ensure stability for customers upgrading to the required stop of GitLab 18.8. GitLab Community…
GitLab US
On June 24, 2026, we released versions 19.1.1, 19.0.3, 18.11.6 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes, and we strongly recommend that all self-managed GitLab installations be upgraded to one of these versions immediately. GitLab.com is already running the patched version. GitLab Dedicated customers do not need to take action. GitLab releases fixes for vulnerabilities in patch releases. There are two types of patch…
EPSS 0.01 CVSS 8.7 CVE-2026-10086 CVE-2026-10712 CVE-2026-11379 CVE-2026-12053 CVE-2026-1606 CVE-2026-2238 CVE-2026-5309 CVE-2026-5796 CVE-2026-5952 CVE-2026-8330 GitLab US