VulnerabilityBSI CERT-Bund
GitLab: Schwachstelle ermöglicht Codeausführung
NEOSEC enrichment — no mirror of the original source
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in GitLab ausnutzen, um beliebigen Programmcode auszuführen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Mediumbsi:WID-SEC-2026-44761 linked CVE
Open advisory with all CVEs
More on GitLab
Other advisories
- MediumCVE-2026-105437GitLab: Schwachstelle ermöglicht Codeausführung
- CriticalCVE-2026-105458GitLab: Mehrere Schwachstellen
- CriticalCVE-2026-92470GitLab: Mehrere Schwachstellen
- CriticalCVE-2026-110264GitLab: Mehrere Schwachstellen
- HighCVE-2026-16255Incorrect Authorization in GitLab
- HighCVE-2026-15723Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLab
- LowCVE-2026-14288Use of Incorrectly-Resolved Name or Reference in GitLab
- MediumCVE-2026-13319Authorization Bypass Through User-Controlled Key in GitLab
Other news entries
- Vulnérabilité dans GitLab (12 novembre 2026)NewsCERT-FR (ANSSI)
- GitLab: Schwachstelle ermöglicht CodeausführungVulnerabilityBSI CERT-Bund
- NCSC-2026-0480 [1.00] [M/H] Kwetsbaarheid verholpen in GitLabNewsNCSC-NL
- Dringend patchen: 11.000 Gitlab-Instanzen durch laufende Angriffe gefährdetNewsGolem.de — Security
- Over 1,000 GitLab servers vulnerable to ongoing RCE attacksNewsBleepingComputer
- GitBook breach: SSO flaw led to production access; all API tokens revoked, rotate integration secretsBreachpwn.watch
- Alpine Linux rebuilds GitLab after attempted RCE attackNewsBleepingComputer
- CISA says max severity GitLab flaw now exploited in the wildNewsBleepingComputer
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4476
ID