https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:36:13.889317+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-gitlab-2023-3907 BIT-gitlab-2023-3907 — Improper User Management in GitLab 2026-10-03T02:36:13.895225+00:00

Affected: Bitnami: gitlab

A privilege escalation vulnerability in GitLab EE affecting all versions from 16.0 prior to 16.4.4, 16.5 prior to 16.5.4, and 16.6 prior to 16.6.2 allows a project Maintainer to use a Project Access Token to escalate their role to Owner

 https://cve.radiocsirt.org/vuln/certfr-2023-avi-1027 certfr-2023-avi-1027 — De multiples vulnérabilités ont été découvertes dans <span class="textit">GitLab</span>. Certaines d'entre elles permet… 2026-10-03T02:36:13.895289+00:00 certfr-2023-avi-1027 https://cve.radiocsirt.org/vuln/euvd-2026-323198 EUVD-2026-323198 2026-10-03T02:36:13.895312+00:00 EUVD-2026-323198 https://cve.radiocsirt.org/vuln/fkie_cve-2023-3907 fkie_cve-2023-3907 2026-10-03T02:36:13.895324+00:00

A privilege escalation vulnerability in GitLab EE affecting all versions from 16.0 prior to 16.4.4, 16.5 prior to 16.5.4, and 16.6 prior to 16.6.2 allows a project Maintainer to use a Project Access Token to escalate their role to Owner

 https://cve.radiocsirt.org/vuln/ghsa-hmrg-q92x-qw2x GHSA-hmrg-q92x-qw2x 2026-10-03T02:36:13.895348+00:00

A privilege escalation vulnerability in GitLab EE affecting all versions from 16.0 prior to 16.4.4, 16.5 prior to 16.5.4, and 16.6 prior to 16.6.2 allows a project Maintainer to use a Project Access Token to escalate their role to Owner

 https://cve.radiocsirt.org/vuln/gsd-2023-3907 gsd-2023-3907 2026-10-03T02:36:13.895363+00:00 gsd-2023-3907 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-3907 UBUNTU-CVE-2023-3907 2026-10-03T02:36:13.895373+00:00

Affected: Ubuntu:16.04:LTS: gitlab

A privilege escalation vulnerability in GitLab EE affecting all versions from 16.0 prior to 16.4.4, 16.5 prior to 16.5.4, and 16.6 prior to 16.6.2 allows a project Maintainer to use a Project Access Token to escalate their role to Owner

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3153 WID-SEC-W-2023-3153 — GitLab: Mehrere Schwachstellen 2026-10-03T02:36:13.895390+00:00

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um seine Privilegien zu erweitern, einen Denial of Service zu verursachen, falsche Informationen darzustellen und Sicherheitsvorkehrungen zu umgehen.