NewsCERT-FR (ANSSI)
Vulnérabilité dans GitLab (30 octobre 2026)
Teaser from the source
Une vulnérabilité a été découverte dans les produits GitLab. Elle permet à un attaquant de provoquer un contournement de la politique de sécurité.
This is the RSS-feed teaser. Read the full article at the original source.
Read at CERT-FR (ANSSI)More on GitLab
Other advisories
- CriticalCVE-2026-105458GitLab: Mehrere Schwachstellen
- HighCVE-2026-16255Incorrect Authorization in GitLab
- HighCVE-2026-15723Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLab
- LowCVE-2026-14288Use of Incorrectly-Resolved Name or Reference in GitLab
- MediumCVE-2026-13319Authorization Bypass Through User-Controlled Key in GitLab
- MediumCVE-2026-12664Incorrect Authorization in GitLab
- MediumCVE-2026-112378Use of Less Trusted Source in GitLab
- LowCVE-2026-112326Improper Cleanup on Thrown Exception in GitLab
Other news entries
- CISA says max severity GitLab flaw now exploited in the wildNewsBleepingComputer
- Angriff auf Ruby-Lücke: Alpine Linux muss Gitlab-Instanz komplett neu aufsetzenNewsGolem.de — Security
- Max-Severity GitLab Vulnerability Exploited Against Alpine LinuxNewsSecurityWeek
- Cisco-Firewalls und GitLab-Lücke werden angegriffenNewsheise Security
- Hinter kritischen GitLab-Lücken stecken Fehler in der Regex-Engine von RubyNewsheise Security
- CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEVNewsThe Hacker News
- Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left OpenNewsThe Hacker News
- GitLab: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
Source: https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1427/
ID