https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T10:29:13.377293+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-14458 bdu:2025-14458 2026-10-04T10:29:13.485010+00:00 bdu:2025-14458 https://cve.radiocsirt.org/vuln/bit-gitlab-2025-11865 BIT-gitlab-2025-11865 — Incorrect Authorization in GitLab 2026-10-04T10:29:13.485055+00:00

Affected: Bitnami: gitlab

An issue has been discovered in GitLab EE affecting all versions from 18.1 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that, under certain circumstances, could have allowed an attacker to remove Duo flows of another user.

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1002 certfr-2025-avi-1002 — De multiples vulnérabilités ont été découvertes dans GitLab. Certaines d'entre elles permettent à un attaquant de provo… 2026-10-04T10:29:13.485093+00:00 certfr-2025-avi-1002 https://cve.radiocsirt.org/vuln/euvd-2026-261117 EUVD-2026-261117 2026-10-04T10:29:13.485113+00:00 EUVD-2026-261117 https://cve.radiocsirt.org/vuln/fkie_cve-2025-11865 fkie_cve-2025-11865 2026-10-04T10:29:13.485125+00:00

An issue has been discovered in GitLab EE affecting all versions from 18.1 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that, under certain circumstances, could have allowed an attacker to remove Duo flows of another user.

 https://cve.radiocsirt.org/vuln/ghsa-5vpg-xw87-4738 GHSA-5vpg-xw87-4738 2026-10-04T10:29:13.485147+00:00

An issue has been discovered in GitLab EE affecting all versions from 18.1 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that, under certain circumstances, could have allowed an attacker to remove Duo flows of another user.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-11865 UBUNTU-CVE-2025-11865 2026-10-04T10:29:13.485162+00:00

Affected: Ubuntu:16.04:LTS: gitlab

An issue has been discovered in GitLab EE affecting all versions from 18.1 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that, under certain circumstances, could have allowed an attacker to remove Duo flows of another user.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2587 WID-SEC-W-2025-2587 — GitLab: Mehrere Schwachstellen 2026-10-04T10:29:13.485180+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Cross-Site-Scripting-Angriffe durchzuführen, vertrauliche Informationen offenzulegen, die Authentifizierung zu umgehen, Daten zu manipulieren oder einen Denial-of-Service-Zustand zu verursachen.