NCSC-2026-0414
Vulnerability from csaf_ncscnl - Published: 2026-10-13 09:39 - Updated: 2026-10-13 09:39Summary
Kwetsbaarheden verholpen in GitLab
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:
NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.
NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.
This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten: GitLab heeft kwetsbaarheden verholpen in GitLab Community Edition (CE) en Enterprise Edition (EE), specifiek in versies voorafgaand aan 19.2.8, 19.3.5 en 19.4.2.
Interpretaties: De kwetsbaarheden zijn aanwezig in verschillende onderdelen van GitLab, waaronder de CI/CD pipelineomgeving, autorisatiemechanismen, API, Kubernetes-integratie en package registry. Kwaadwillenden kunnen de kwetsbaarheden misbruiken voor het uitvoeren van willekeurige code, vergrijken van ongeautoriseerde toegang tot gevoelige gegevens en het uitvoeren van cross-site-scripting-aanvallen.
De kwetsbaarheid met kenmerk CVE-2026-97229 heeft de hoogste CVSS3.1-score van 10.0 gekregen. Een ongeauthenticeerde kwaadwillende kan deze kwetsbaarheid misbruiken om via een malafide CI/CD-configuratie willekeurige code uit te voeren.
Oplossingen: GitLab heeft beveiligingsupdates uitgebracht om de kwetsbaarheden te verhelpen in versies 19.2.8, 19.3.5 en 19.4.2. Het NCSC adviseert om deze beveiligingsupdates op korte termijn te installeren. Zie bijgevoegde referenties voor meer informatie.
Kans: medium
Schade: high
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-185: Incorrect Regular Expression
CWE-190: Integer Overflow or Wraparound
CWE-266: Incorrect Privilege Assignment
CWE-349: Acceptance of Extraneous Untrusted Data With Trusted Data
CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CWE-532: Insertion of Sensitive Information into Log File
CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
CWE-625: Permissive Regular Expression
CWE-807: Reliance on Untrusted Inputs in a Security Decision
CWE-863: Incorrect Authorization
CWE-918: Server-Side Request Forgery (SSRF)
CWE-1220: Insufficient Granularity of Access Control
CWE-1427: Improper Neutralization of Input Used for LLM Prompting
GitLab versions prior to 19.2.8, 19.3.5, and 19.4.2 contained a vulnerability allowing unauthenticated users to execute arbitrary code via specially crafted regular expressions in CI/CD configurations due to insufficient input validation.
10.0 (Critical)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
GitLab / GitLab
|
vers:unknown/* |
GitLab versions 19.1 to before 19.2.8, 19.3 to before 19.3.5, and 19.4 to before 19.4.2 contain a vulnerability allowing authenticated users to execute arbitrary JavaScript in other users' browsers via improper HTML attribute sanitization in syntax-highlighted repository output.
8.7 (High)
Affected products
Known affected
1 product, the same list as for
CVE-2026-97229
GitLab versions prior to 19.2.8, 19.3.5, and 19.4.2 contained a security flaw allowing authenticated Developer role users to improperly execute CI/CD pipelines on protected branches due to incorrect authorization checks.
8.5 (High)
Affected products
Known affected
1 product, the same list as for
CVE-2026-97229
GitLab versions prior to 19.2.8, 19.3.5, and 19.4.2 contained a vulnerability allowing users to poison cached raw repository file responses, potentially exposing protected environment variables and enabling malicious CI/CD pipeline execution.
8.2 (High)
Affected products
Known affected
1 product, the same list as for
CVE-2026-97229
GitLab fixed a vulnerability in GitLab EE versions 18.1 to before 19.2.8, 19.3 to before 19.3.5, and 19.4 to before 19.4.2 that allowed authenticated users to execute arbitrary CI/CD pipelines with elevated group privileges due to improper cleanup of scheduled pipeline execution policy records.
7.7 (High)
Affected products
Known affected
1 product, the same list as for
CVE-2026-97229
GitLab addressed a security flaw in specific GitLab EE versions where authenticated users could inject malicious content into AI agent instructions, leading to unintended command execution attributed to other users due to improper handling of special elements in AI conversation context.
7.3 (High)
Affected products
Known affected
1 product, the same list as for
CVE-2026-97229
GitLab addressed a security vulnerability in versions 12.0 to before 19.2.8, 19.3 to before 19.3.5, and 19.4 to before 19.4.2 where authenticated users with access to GitLab Pages log data could access sensitive tokens and secrets due to improper logging.
6.2 (Medium)
Affected products
Known affected
1 product, the same list as for
CVE-2026-97229
GitLab addressed a vulnerability in versions 13.11 to before 19.2.8, 19.3 to before 19.3.5, and 19.4 to before 19.4.2 where an authenticated user controlling a Kubernetes agent could cause sensitive authentication tokens to be redirected to an unintended server due to improper redirect validation in the Kubernetes proxy.
5.8 (Medium)
Affected products
Known affected
1 product, the same list as for
CVE-2026-97229
GitLab addressed a security vulnerability in versions 17.4 to before 19.2.8, 19.3 to before 19.3.5, and 19.4 to before 19.4.2 that allowed unauthenticated users to access confidential notes on public projects due to improper authorization checks.
5.3 (Medium)
Affected products
Known affected
1 product, the same list as for
CVE-2026-97229
GitLab versions 17.11 to before 19.2.8, all 19.3 versions, and before 19.4.2 contained a security vulnerability allowing unauthenticated users to access work item contents in private groups and projects due to improper authorization checks.
5.3 (Medium)
Affected products
Known affected
1 product, the same list as for
CVE-2026-97229
GitLab versions prior to 19.2.8, 19.3.5, and 19.4.2 contained a security flaw in the GraphQL API that allowed unauthenticated users to access internal and confidential notes on public projects due to improper authorization.
5.3 (Medium)
Affected products
Known affected
1 product, the same list as for
CVE-2026-97229
GitLab addressed a vulnerability in versions 16.2 to before 19.2.8, 19.3 to before 19.3.5, and 19.4 to before 19.4.2 where authenticated users could manipulate cached page content served to others due to improper cache key construction in certain deployments.
4.6 (Medium)
Affected products
Known affected
1 product, the same list as for
CVE-2026-97229
GitLab addressed a security flaw in versions 17.0 to before 19.2.8, 19.3 to before 19.3.5, and 19.4 to before 19.4.2 where authenticated users with Guest access could improperly access confidential epic content due to authorization errors.
4.3 (Medium)
Affected products
Known affected
1 product, the same list as for
CVE-2026-97229
GitLab addressed a security flaw affecting versions 13.8 to before 19.2.8, 19.3 to before 19.3.5, and 19.4 to before 19.4.2, where authenticated users with reporter roles could access restricted CI artifact report content due to missing authorization checks.
4.3 (Medium)
Affected products
Known affected
1 product, the same list as for
CVE-2026-97229
GitLab addressed a security flaw in specific GitLab EE versions where users with custom roles and compliance framework admin permissions could improperly execute specially crafted compliance pipelines across group projects due to incorrect privilege assignment.
4.3 (Medium)
Affected products
Known affected
1 product, the same list as for
CVE-2026-97229
GitLab versions prior to 19.2.8, 19.3.5, and 19.4.2 contained an authorization flaw allowing authenticated users with project-scoped fine-grained Personal Access Tokens to improperly delete or modify group-level labels.
4.3 (Medium)
Affected products
Known affected
1 product, the same list as for
CVE-2026-97229
GitLab addressed a security vulnerability in certain GitLab EE versions where an authenticated user with specific granular permissions could exploit untrusted input to obtain a GitLab Duo Agent Platform token, bypassing governance controls.
4.3 (Medium)
Affected products
Known affected
1 product, the same list as for
CVE-2026-97229
GitLab addressed a security flaw in versions 15.1 to before 19.2.8, 19.3 to before 19.3.5, and 19.4 to before 19.4.2 that allowed unauthorized users to download package files from public projects due to improper authorization checks.
4.2 (Medium)
Affected products
Known affected
1 product, the same list as for
CVE-2026-97229
GitLab resolved a vulnerability in GitLab EE versions prior to 19.2.8, 19.3.5, and 19.4.2 where authenticated contributors to merge requests could improperly approve them due to identity resolution flaws.
4.2 (Medium)
Affected products
Known affected
1 product, the same list as for
CVE-2026-97229
GitLab addressed a security flaw in versions prior to 19.2.8, 19.3.5, and 19.4.2 where authenticated users with project-scoped Personal Access Tokens could improperly modify group integrations beyond their authorized scope due to faulty authorization checks.
4.2 (Medium)
Affected products
Known affected
1 product, the same list as for
CVE-2026-97229
GitLab versions 10.3 to before 19.2.8, 19.3 to before 19.3.5, and 19.4 to before 19.4.2 contained a race condition in URL validation during repository imports that allowed authenticated users to perform server-side request forgery and access internal network resources.
CWE-918 - Server-Side Request Forgery (SSRF)Affected products
Known affected
1 product, the same list as for
CVE-2026-97229
GitLab versions prior to 19.2.8, 19.3.5, and 19.4.2 contained a vulnerability allowing authenticated users with limited Personal Access Tokens to improperly import projects into unauthorized group namespaces due to incorrect namespace authorization.
CWE-863 - Incorrect AuthorizationAffected products
Known affected
1 product, the same list as for
CVE-2026-97229
GitLab addressed a security flaw in versions 17.6 to before 19.2.8, 19.3 to before 19.3.5, and 19.4 to before 19.4.2 where maintainer-role users could bypass authorization checks to improperly remove package registry metadata protected by higher role restrictions.
CWE-863 - Incorrect AuthorizationAffected products
Known affected
1 product, the same list as for
CVE-2026-97229
GitLab addressed a security flaw in multiple GitLab EE versions that allowed authenticated users with limited permissions to improperly modify project CI/CD deployment rollback settings due to insufficient access control.
CWE-863 - Incorrect AuthorizationAffected products
Known affected
1 product, the same list as for
CVE-2026-97229
References
25 references
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "GitLab heeft kwetsbaarheden verholpen in GitLab Community Edition (CE) en Enterprise Edition (EE), specifiek in versies voorafgaand aan 19.2.8, 19.3.5 en 19.4.2.",
"title": "Feiten"
},
{
"category": "description",
"text": "De kwetsbaarheden zijn aanwezig in verschillende onderdelen van GitLab, waaronder de CI/CD pipelineomgeving, autorisatiemechanismen, API, Kubernetes-integratie en package registry. Kwaadwillenden kunnen de kwetsbaarheden misbruiken voor het uitvoeren van willekeurige code, vergrijken van ongeautoriseerde toegang tot gevoelige gegevens en het uitvoeren van cross-site-scripting-aanvallen.\n\nDe kwetsbaarheid met kenmerk CVE-2026-97229 heeft de hoogste CVSS3.1-score van 10.0 gekregen. Een ongeauthenticeerde kwaadwillende kan deze kwetsbaarheid misbruiken om via een malafide CI/CD-configuratie willekeurige code uit te voeren.",
"title": "Interpretaties"
},
{
"category": "description",
"text": "GitLab heeft beveiligingsupdates uitgebracht om de kwetsbaarheden te verhelpen in versies 19.2.8, 19.3.5 en 19.4.2. Het NCSC adviseert om deze beveiligingsupdates op korte termijn te installeren. Zie bijgevoegde referenties voor meer informatie.",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
},
{
"category": "general",
"text": "Incorrect Regular Expression",
"title": "CWE-185"
},
{
"category": "general",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "general",
"text": "Incorrect Privilege Assignment",
"title": "CWE-266"
},
{
"category": "general",
"text": "Acceptance of Extraneous Untrusted Data With Trusted Data",
"title": "CWE-349"
},
{
"category": "general",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
},
{
"category": "general",
"text": "Insertion of Sensitive Information into Log File",
"title": "CWE-532"
},
{
"category": "general",
"text": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
"title": "CWE-601"
},
{
"category": "general",
"text": "Permissive Regular Expression",
"title": "CWE-625"
},
{
"category": "general",
"text": "Reliance on Untrusted Inputs in a Security Decision",
"title": "CWE-807"
},
{
"category": "general",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "general",
"text": "Server-Side Request Forgery (SSRF)",
"title": "CWE-918"
},
{
"category": "general",
"text": "Insufficient Granularity of Access Control",
"title": "CWE-1220"
},
{
"category": "general",
"text": "Improper Neutralization of Input Used for LLM Prompting",
"title": "CWE-1427"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference",
"url": "https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/"
}
],
"title": "Kwetsbaarheden verholpen in GitLab",
"tracking": {
"current_release_date": "2026-10-13T09:39:58.905563Z",
"generator": {
"date": "2025-08-04T16:30:00Z",
"engine": {
"name": "V.A.",
"version": "1.3"
}
},
"id": "NCSC-2026-0414",
"initial_release_date": "2026-10-13T09:39:58.905563Z",
"revision_history": [
{
"date": "2026-10-13T09:39:58.905563Z",
"number": "1.0.0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-1"
}
}
],
"category": "product_name",
"name": "GitLab"
}
],
"category": "vendor",
"name": "GitLab"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-97229",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "description",
"text": "GitLab versions prior to 19.2.8, 19.3.5, and 19.4.2 contained a vulnerability allowing unauthenticated users to execute arbitrary code via specially crafted regular expressions in CI/CD configurations due to insufficient input validation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-97229 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-97229.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 10.0,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-97229"
},
{
"cve": "CVE-2026-92883",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
},
{
"category": "description",
"text": "GitLab versions 19.1 to before 19.2.8, 19.3 to before 19.3.5, and 19.4 to before 19.4.2 contain a vulnerability allowing authenticated users to execute arbitrary JavaScript in other users\u0027 browsers via improper HTML attribute sanitization in syntax-highlighted repository output.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-92883 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-92883.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-92883"
},
{
"cve": "CVE-2026-16301",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "description",
"text": "GitLab versions prior to 19.2.8, 19.3.5, and 19.4.2 contained a security flaw allowing authenticated Developer role users to improperly execute CI/CD pipelines on protected branches due to incorrect authorization checks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16301 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16301.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-16301"
},
{
"cve": "CVE-2026-14814",
"cwe": {
"id": "CWE-625",
"name": "Permissive Regular Expression"
},
"notes": [
{
"category": "other",
"text": "Permissive Regular Expression",
"title": "CWE-625"
},
{
"category": "description",
"text": "GitLab versions prior to 19.2.8, 19.3.5, and 19.4.2 contained a vulnerability allowing users to poison cached raw repository file responses, potentially exposing protected environment variables and enabling malicious CI/CD pipeline execution.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-14814 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-14814.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-14814"
},
{
"cve": "CVE-2026-81839",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "description",
"text": "GitLab fixed a vulnerability in GitLab EE versions 18.1 to before 19.2.8, 19.3 to before 19.3.5, and 19.4 to before 19.4.2 that allowed authenticated users to execute arbitrary CI/CD pipelines with elevated group privileges due to improper cleanup of scheduled pipeline execution policy records.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-81839 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-81839.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-81839"
},
{
"cve": "CVE-2026-96893",
"cwe": {
"id": "CWE-1427",
"name": "Improper Neutralization of Input Used for LLM Prompting"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Input Used for LLM Prompting",
"title": "CWE-1427"
},
{
"category": "description",
"text": "GitLab addressed a security flaw in specific GitLab EE versions where authenticated users could inject malicious content into AI agent instructions, leading to unintended command execution attributed to other users due to improper handling of special elements in AI conversation context.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-96893 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-96893.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-96893"
},
{
"cve": "CVE-2026-101168",
"cwe": {
"id": "CWE-532",
"name": "Insertion of Sensitive Information into Log File"
},
"notes": [
{
"category": "other",
"text": "Insertion of Sensitive Information into Log File",
"title": "CWE-532"
},
{
"category": "description",
"text": "GitLab addressed a security vulnerability in versions 12.0 to before 19.2.8, 19.3 to before 19.3.5, and 19.4 to before 19.4.2 where authenticated users with access to GitLab Pages log data could access sensitive tokens and secrets due to improper logging.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-101168 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-101168.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-101168"
},
{
"cve": "CVE-2026-7767",
"cwe": {
"id": "CWE-601",
"name": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)"
},
"notes": [
{
"category": "other",
"text": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
"title": "CWE-601"
},
{
"category": "description",
"text": "GitLab addressed a vulnerability in versions 13.11 to before 19.2.8, 19.3 to before 19.3.5, and 19.4 to before 19.4.2 where an authenticated user controlling a Kubernetes agent could cause sensitive authentication tokens to be redirected to an unintended server due to improper redirect validation in the Kubernetes proxy.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-7767 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-7767.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-7767"
},
{
"cve": "CVE-2026-16275",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "description",
"text": "GitLab addressed a security vulnerability in versions 17.4 to before 19.2.8, 19.3 to before 19.3.5, and 19.4 to before 19.4.2 that allowed unauthenticated users to access confidential notes on public projects due to improper authorization checks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16275 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16275.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-16275"
},
{
"cve": "CVE-2026-84284",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "description",
"text": "GitLab versions 17.11 to before 19.2.8, all 19.3 versions, and before 19.4.2 contained a security vulnerability allowing unauthenticated users to access work item contents in private groups and projects due to improper authorization checks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84284 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84284.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-84284"
},
{
"cve": "CVE-2026-85529",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "description",
"text": "GitLab versions prior to 19.2.8, 19.3.5, and 19.4.2 contained a security flaw in the GraphQL API that allowed unauthenticated users to access internal and confidential notes on public projects due to improper authorization.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-85529 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-85529.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-85529"
},
{
"cve": "CVE-2026-100755",
"cwe": {
"id": "CWE-349",
"name": "Acceptance of Extraneous Untrusted Data With Trusted Data"
},
"notes": [
{
"category": "other",
"text": "Acceptance of Extraneous Untrusted Data With Trusted Data",
"title": "CWE-349"
},
{
"category": "description",
"text": "GitLab addressed a vulnerability in versions 16.2 to before 19.2.8, 19.3 to before 19.3.5, and 19.4 to before 19.4.2 where authenticated users could manipulate cached page content served to others due to improper cache key construction in certain deployments.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-100755 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-100755.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-100755"
},
{
"cve": "CVE-2026-14552",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "description",
"text": "GitLab addressed a security flaw in versions 17.0 to before 19.2.8, 19.3 to before 19.3.5, and 19.4 to before 19.4.2 where authenticated users with Guest access could improperly access confidential epic content due to authorization errors.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-14552 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-14552.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-14552"
},
{
"cve": "CVE-2026-6567",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "description",
"text": "GitLab addressed a security flaw affecting versions 13.8 to before 19.2.8, 19.3 to before 19.3.5, and 19.4 to before 19.4.2, where authenticated users with reporter roles could access restricted CI artifact report content due to missing authorization checks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-6567 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-6567.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-6567"
},
{
"cve": "CVE-2026-104661",
"cwe": {
"id": "CWE-266",
"name": "Incorrect Privilege Assignment"
},
"notes": [
{
"category": "other",
"text": "Incorrect Privilege Assignment",
"title": "CWE-266"
},
{
"category": "description",
"text": "GitLab addressed a security flaw in specific GitLab EE versions where users with custom roles and compliance framework admin permissions could improperly execute specially crafted compliance pipelines across group projects due to incorrect privilege assignment.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-104661 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-104661.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-104661"
},
{
"cve": "CVE-2026-14210",
"cwe": {
"id": "CWE-1220",
"name": "Insufficient Granularity of Access Control"
},
"notes": [
{
"category": "other",
"text": "Insufficient Granularity of Access Control",
"title": "CWE-1220"
},
{
"category": "description",
"text": "GitLab versions prior to 19.2.8, 19.3.5, and 19.4.2 contained an authorization flaw allowing authenticated users with project-scoped fine-grained Personal Access Tokens to improperly delete or modify group-level labels.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-14210 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-14210.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-14210"
},
{
"cve": "CVE-2026-105458",
"cwe": {
"id": "CWE-807",
"name": "Reliance on Untrusted Inputs in a Security Decision"
},
"notes": [
{
"category": "other",
"text": "Reliance on Untrusted Inputs in a Security Decision",
"title": "CWE-807"
},
{
"category": "description",
"text": "GitLab addressed a security vulnerability in certain GitLab EE versions where an authenticated user with specific granular permissions could exploit untrusted input to obtain a GitLab Duo Agent Platform token, bypassing governance controls.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-105458 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-105458.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-105458"
},
{
"cve": "CVE-2026-5954",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "description",
"text": "GitLab addressed a security flaw in versions 15.1 to before 19.2.8, 19.3 to before 19.3.5, and 19.4 to before 19.4.2 that allowed unauthorized users to download package files from public projects due to improper authorization checks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-5954 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-5954.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-5954"
},
{
"cve": "CVE-2026-92528",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "description",
"text": "GitLab resolved a vulnerability in GitLab EE versions prior to 19.2.8, 19.3.5, and 19.4.2 where authenticated contributors to merge requests could improperly approve them due to identity resolution flaws.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-92528 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-92528.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-92528"
},
{
"cve": "CVE-2026-78335",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "description",
"text": "GitLab addressed a security flaw in versions prior to 19.2.8, 19.3.5, and 19.4.2 where authenticated users with project-scoped Personal Access Tokens could improperly modify group integrations beyond their authorized scope due to faulty authorization checks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-78335 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-78335.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-78335"
},
{
"cve": "CVE-2026-100104",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"notes": [
{
"category": "other",
"text": "Server-Side Request Forgery (SSRF)",
"title": "CWE-918"
},
{
"category": "description",
"text": "GitLab versions 10.3 to before 19.2.8, 19.3 to before 19.3.5, and 19.4 to before 19.4.2 contained a race condition in URL validation during repository imports that allowed authenticated users to perform server-side request forgery and access internal network resources.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-100104 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-100104.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-100104"
},
{
"cve": "CVE-2026-82632",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "description",
"text": "GitLab versions prior to 19.2.8, 19.3.5, and 19.4.2 contained a vulnerability allowing authenticated users with limited Personal Access Tokens to improperly import projects into unauthorized group namespaces due to incorrect namespace authorization.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-82632 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-82632.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-82632"
},
{
"cve": "CVE-2026-103549",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "description",
"text": "GitLab addressed a security flaw in versions 17.6 to before 19.2.8, 19.3 to before 19.3.5, and 19.4 to before 19.4.2 where maintainer-role users could bypass authorization checks to improperly remove package registry metadata protected by higher role restrictions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-103549 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-103549.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-103549"
},
{
"cve": "CVE-2026-9268",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "description",
"text": "GitLab addressed a security flaw in multiple GitLab EE versions that allowed authenticated users with limited permissions to improperly modify project CI/CD deployment rollback settings due to insufficient access control.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-9268 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-9268.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-9268"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…