poslední zpráva
SPOJENO AI EPSS 0.01 (nejvyšší)
GitLab security advisory (AV26-962)
Serial number: AV26-962Date: September 25, 2026 As of September 23, 2026, GitLab is affected by vulnerabilities in the following product: GitLab Prior to 19.2.7 Prior to 19.3.3 Prior to 19.4.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. GitLab Critical Patch Release: 19.4.1, 19.3.3, 19.2.7 GitLab release notes | GitLab Docs
Číst originál na Cyber Centre Kanada →
Událost se už nepřepočítává, tohle je stav k 28. 9. 2026. Novější zprávy o téže věci najdete ve výpisu všech zpráv.
GitLab CA IT US
CVE v události 9
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-10518 | 4.3 3.1 · GitLab | – | < 0.01 |
| CVE-2026-84739 | 8.7 3.1 · GitLab | – | < 0.01 |
| CVE-2026-89078 | 9.9 3.1 · GitLab | – | 0.01 |
| CVE-2026-8937 | 4.3 3.1 · GitLab | – | < 0.01 |
| CVE-2026-92470 | 7.7 3.1 · GitLab | – | < 0.01 |
| CVE-2026-92529 | 4.3 3.1 · GitLab | – | < 0.01 |
| CVE-2026-92530 | 4.3 3.1 · GitLab | – | < 0.01 |
| CVE-2026-92874 | 5.4 3.1 · GitLab | – | < 0.01 |
| CVE-2026-93577 | 9.9 3.1 · GitLab | – | 0.01 |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 9.9.
Jak se o tom psalo 3
-
· Cyber Centre Kanada CA nadpis události
GitLab security advisory (AV26-962)
Serial number: AV26-962Date: September 25, 2026 As of September 23, 2026, GitLab is affected by vulnerabilities in the following product: GitLab Prior to 19.2.7 Prior to 19.3.3 Prior to 19.4.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. GitLab Critical Patch Release: 19.4.1, 19.3.3, 19.2.7 GitLab release notes | GitLab Docs
-
· CSIRT Itálie (ACN) IT
Risolte vulnerabilità su GitLab CE/EE
Rilasciati aggiornamenti di sicurezza che risolvono 7 vulnerabilità, di cui una con gravità “alta” e 2 con gravità “critica”, in GitLab Community Edition (CE) ed Enterprise Edition (EE). Tali vulnerabilità, qualora sfruttate, potrebbero consentire a un utente malintenzionato di accedere ad informazioni riservate o eseguire codice arbitrario sui sistemi interessati.
-
· zachyceno · GitLab Security US
GitLab Critical Patch Release: 19.4.1, 19.3.3, 19.2.7
On September 23, 2026, we released versions 19.4.1, 19.3.3, 19.2.7 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes, and we strongly recommend that all self-managed GitLab installations be upgraded to one of these versions immediately. GitLab.com is already running the patched version. GitLab Dedicated customers do not need to take action. GitLab releases fixes for vulnerabilities in patch releases. There are two types of…