VIRY.CZRADAR
sektor
téma
typ textu

← nejvýznamnější zprávy · všechny zprávy

poslední zpráva · zachyceno

SPOJENO PŘES CVE EPSS 0.60 (nejvyšší)

GitLab Critical Patch Release: 19.2.4, 19.1.6, 19.0.8, 18.11.11

Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.4, CVEs: CVE-2026-19650, CVE-2026-19478, Summary: CVE-2026-19478 9.4 GitLab has remediated an issue that under certain conditions could allow an unauthenticated user to remotely modify or delete public projects and user data via a GraphQL directive. CVE-2026-19650 7.1 GitLab has remediated an issue that under certain conditions could have allowed an unauthenticated user to execute mutations via GET…

Číst originál na NCSC-FI →

5 zpráv z 4 zdrojů · první · zachyceno CZ · EN/orig

GitLab FI IT FR US

CVE v události 2

CVEhodnoceníKEVEPSS
CVE-2026-19478 9.4 3.1 · GitLab – 0.60
CVE-2026-19650 7.1 3.1 · GitLab – 0.01

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 9.4.

Jak se o tom psalo 5

  1. · zachyceno · NCSC-FI FI nadpis události

    GitLab Critical Patch Release: 19.2.4, 19.1.6, 19.0.8, 18.11.11

    Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.4, CVEs: CVE-2026-19650, CVE-2026-19478, Summary: CVE-2026-19478 9.4 GitLab has remediated an issue that under certain conditions could allow an unauthenticated user to remotely modify or delete public projects and user data via a GraphQL directive. CVE-2026-19650 7.1 GitLab has remediated an issue that under certain conditions could have allowed an unauthenticated user to execute mutations via GET…

  2. · CSIRT Itálie (ACN) IT

    Rilevate vulnerabilità in GitLab

    Rilevate due vulnerabilità di sicurezza, di cui una con gravità "critica" e una con gravità "alta", che interessano GitLab Community Edition (CE) e GitLab Enterprise Edition (EE).. Tali vulnerabilità, qualora sfruttate, potrebbero consentire ad un utente malintenzionato di alterare i dati e di aggirare i meccanismi di sicurezza implementati sui sistemi interessati.

  3. · zachyceno · CERT-FR – avis FR

    Multiples vulnérabilités dans GitLab (18 août 2026)

    De multiples vulnérabilités ont été découvertes dans GitLab. Certaines d'entre elles permettent à un attaquant de provoquer une atteinte à l'intégrité des données et une injection de requêtes illégitimes par rebond (CSRF).

  4. · zachyceno · GitLab Security US

    GitLab Critical Patch Release: 19.2.4, 19.1.6, 19.0.8, 18.11.11

    On August 17, 2026, we released versions 19.2.4, 19.1.6, 19.0.8, 18.11.11 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes, and we strongly recommend that all self-managed GitLab installations be upgraded to one of these versions immediately. GitLab.com and GitLab Dedicated are already running the patched version. GitLab.com and GitLab Dedicated customers do not need to take action. GitLab releases fixes for vulnerabilities…

  5. · zachyceno · GitLab Security US

    GitLab Critical Patch Release: 19.2.4, 19.1.6, 19.0.8, 18.11.11

    On August 17, 2026, we released versions 19.2.4, 19.1.6, 19.0.8, 18.11.11 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes, and we strongly recommend that all self-managed GitLab installations be upgraded to one of these versions immediately. GitLab.com and GitLab Dedicated are already running the patched version. GitLab.com and GitLab Dedicated customers do not need to take action. GitLab releases fixes for vulnerabilities…