GitLab EE

Search everything

Mentions · 7d0
Mentions · 30d2
All mentions12
First seenAug 17, 2026
Last mentioned8d ago

Timeline

12 articles · newest first

GitLab patches unauthenticated code execution bug CVE-2026-110264

The integer overflow hits GitLab CE/EE back to 7.0; fixes include 19.5.1 and backports through 18.11.13.

CSO OnlineOct 22, 20:29 UTC · 8d agoVulnerabilityCVE-2026-110264 CVE-2026-157231

Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Rapid7 shows a reliable RCE proof of concept for GitLab's CVSS 10 regex flaw CVE-2026-97229.

Rapid7 BlogOct 16, 13:31 UTC · 14d agoVulnerabilityCVE-2026-972299 · 4 reads

GitLab CVE-2026-85706 Added to CISA KEV

CISA added CVE-2026-85706 to KEV: a path traversal in GitLab CE/EE letting unauthenticated attackers read arbitrary files.

SOCRadarSep 14, 09:03 UTC · Sep 14, 2026Exploit / PoCExploitedCVE-2026-857062 · 1 read

CVE-2026-85706 | GitLab CE/EE Repository Commits API Path Traversal Vulnerability

GitLab patches CVSS 10.0 path traversal CVE-2026-85706 letting unauthenticated attackers read arbitrary files on self-managed CE/EE servers.

Horizon3.aiSep 11, 20:13 UTC · Sep 11, 2026VulnerabilityCVE-2026-857062 · 1 read

GitLab’s critical flaw is already drawing internet-wide probes

GitLab patches two critical flaws (CVE-2026-85706 CVSS 10.0, CVE-2026-87719) as WatchTowr observes internet-wide probing of the unauthenticated file-read bug.

CyberScoopSep 11, 18:41 UTC · Sep 11, 2026VulnerabilityExploitedCVE-2026-85706 CVE-2026-877192

GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure

GitLab patched CVE-2026-85706, a CVSS 10.0 unauthenticated path traversal enabling arbitrary file reads, already probed in the wild.

The Hacker NewsSep 11, 16:30 UTC · Sep 11, 2026Exploit / PoCExploitedCVE-2026-85706 CVE-2026-87719 CVE-2026-194782

GitLab Vulnerability Exploited One Day After Disclosure

WatchTowr observed in-the-wild exploitation of critical GitLab path traversal CVE-2026-85706 one day after disclosure, letting unauthenticated attackers read arbitrary files.

SecurityWeekSep 11, 16:11 UTC · Sep 11, 2026Exploit / PoCExploitedCVE-2026-85706 CVE-2026-877194 · 2 reads

GitLab urges users to patch max severity path traversal flaw

GitLab urges self-managed users to immediately patch a maximum-severity path traversal flaw (CVE-2023-2825) enabling unauthenticated arbitrary file reads.

BleepingComputerSep 11, 11:15 UTC · Sep 11, 2026VulnerabilityCVE-2023-2825 CVE-2026-87719 CVE-2021-22175+12 · 1 read

Critical GitLab Flaws Let Attackers Read Arbitrary Files, Steal Credentials and Execute Code

GitLab issues emergency patches for critical path-traversal flaw CVE-2026-85706 (CVSS 10.0), GraphQL credential exposure CVE-2026-87719, and potential RCE flaw CVE-2026-88765.

GBHackersSep 11, 10:13 UTC · Sep 11, 2026VulnerabilityCVE-2026-85706 CVE-2026-87719 CVE-2026-88765+152 · 1 read

GitLab Patches Critical Flaws Enabling Arbitrary File Read, Credential Theft and Remote Code Execution

GitLab patched a CVSS 10.0 path traversal (CVE-2026-85706) plus deserialization and buffer-overflow flaws, urging self-managed users to update immediately.

Cyber Security NewsSep 11, 08:20 UTC · Sep 11, 2026VulnerabilityCVE-2026-85706 CVE-2026-87719 CVE-2026-887652 · 1 read

Critical GitLab flaw allows attackers to modify or delete public projects (CVE-2026-19478)

GitLab patched a critical unauthenticated code injection flaw CVE-2026-19478 (CVSS 9.4) enabling modification or deletion of public projects; upgrades urged.

Help Net SecurityAug 18, 00:00 UTC · Aug 18, 2026VulnerabilityCVE-2026-19478 CVE-2026-196502

Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects

GitLab urgently patched CVE-2026-19478 (CVSS 9.4), a critical unauthenticated GraphQL flaw allowing modification or deletion of public projects on self-managed instances.

The Hacker NewsAug 17, 21:03 UTC · Aug 17, 2026VulnerabilityCVE-2026-19478 CVE-2026-196502

Related CVEs

by mentions

CVE-2026-8570697%10.0
Unauthenticated Path Traversal Arbitrary File Read in GitLab CE/EE
published Sep 12, 2026GitLab Community EditionKEVPoC ×13
CVE-2026-877199.9
Authenticated GraphQL Subscription Flaw Leaks Search Credentials in GitLab EE
published Sep 12, 2026GitLab EE
CVE-2026-194786%9.1
Unauthenticated GraphQL Code Injection in GitLab CE/EE Enables Data Tampering
published Aug 17, 2026GitLab CE
CVE-2026-887658.5
Authenticated RCE via Malicious Project Import in GitLab EE Advanced Search
published Sep 15, 2026GitLab EE
CVE-2026-19650<1%7.1
CSRF Flaw in GitLab CE/EE GraphQL Lets GET Requests Execute Mutations
published Aug 17, 2026GitLab CE/EE (Community Edition and Enterprise Edition)
CVE-2026-157238.2
LDAP account takeover in GitLab when SAML and LDAP auto-link are on
published 8d agoGitLab CE/EE
CVE-2026-132107.7
Authenticated CI/CD Variable Environment Scope Bypass in GitLab CE/EE
published Sep 15, 2026GitLab CE/EE
CVE-2024-112226.4
TOCTOU Race Condition in GitLab CE/EE Lets Developers Act in Other Users' Merge Requests
published Sep 16, 2026GitLab CE
CVE-2026-863414.4
GitLab EE Access Control Flaw Bypasses Protected Environment Deployment Approvals
published Sep 16, 2026GitLab EE (Enterprise Edition)
CVE-2026-75144.3
Missing Authorization in GitLab CE/EE Lets Developers Tamper with Generic Packages
published Sep 16, 2026GitLab Community Edition (CE)

Appears with

GitLabvendor · 12
GitLab CEproduct · 12
GitLaborganization · 5
watchTowrvendor · 2
watchTowrorganization · 2
CISAvendor · 2
HackerOneorganization · 2
CISAorganization · 2
Horizon3vendor · 1
Duo Chatproduct · 1
NodeZeroproduct · 1
WatchTowr Labsorganization · 1
GitLab Dedicatedproduct · 1
GitLab.comproduct · 1
HackerOnevendor · 1
Advanced Searchproduct · 1

Entities are extracted by the model from each article. First seen Aug 17, 2026, last mentioned 8d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.