https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:17:08.885328+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-gitlab-2025-14562 BIT-gitlab-2025-14562 — Incorrect Authorization in GitLab 2026-10-03T23:17:08.981532+00:00

Affected: Bitnami: gitlab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.6 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user with developer-role permissions to commit changes to a project after being removed as a member, due to improper authorization checks on merge request collaboration settings.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0946 certfr-2026-avi-0946 — De multiples vulnérabilités ont été découvertes dans GitLab. Certaines d'entre elles permettent à un attaquant de provo… 2026-10-03T23:17:08.981602+00:00 certfr-2026-avi-0946 https://cve.radiocsirt.org/vuln/euvd-2026-342527 EUVD-2026-342527 2026-10-03T23:17:08.981623+00:00 EUVD-2026-342527 https://cve.radiocsirt.org/vuln/fkie_cve-2025-14562 fkie_cve-2025-14562 2026-10-03T23:17:08.981637+00:00

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.6 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user with developer-role permissions to commit changes to a project after being removed as a member, due to improper authorization checks on merge request collaboration settings.

 https://cve.radiocsirt.org/vuln/ghsa-45h8-qrqh-xr5v GHSA-45h8-qrqh-xr5v 2026-10-03T23:17:08.981665+00:00

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.6 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user with developer-role permissions to commit changes to a project after being removed as a member, due to improper authorization checks on merge request collaboration settings.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0270 NCSC-2026-0270 — Kwetsbaarheden verholpen in GitLab door GitLab Inc. 2026-10-03T23:17:08.981684+00:00 NCSC-2026-0270 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2586 WID-SEC-W-2026-2586 — GitLab: Mehrere Schwachstellen 2026-10-03T23:17:08.981719+00:00

Ein Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.