<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-04T04:22:26.848661+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bdu:2026-08987</id>
    <title>bdu:2026-08987</title>
    <updated>2026-10-04T04:22:26.929447+00:00</updated>
    <content>bdu:2026-08987</content>
    <link href="https://cve.radiocsirt.org/vuln/bdu:2026-08987"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bit-gitlab-2026-11379</id>
    <title>BIT-gitlab-2026-11379 — Incorrect Authorization in GitLab</title>
    <updated>2026-10-04T04:22:26.929485+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Bitnami: gitlab</p>
<p>GitLab has remediated an issue in GitLab EE affecting all versions from 13.11 prior to 18.11.6, 19.0 prior to 19.0.3, and 19.1 prior to 19.1.1 in which incorrect authorization in DAST site profile management could allow a user with Developer role to exfiltrate DAST site profile secrets under certain conditions.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/bit-gitlab-2026-11379"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/certfr-2026-avi-0799</id>
    <title>certfr-2026-avi-0799 — De multiples vulnérabilités ont été découvertes dans GitLab. Certaines d'entre elles permettent à un attaquant de provo…</title>
    <updated>2026-10-04T04:22:26.929521+00:00</updated>
    <content>certfr-2026-avi-0799</content>
    <link href="https://cve.radiocsirt.org/vuln/certfr-2026-avi-0799"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-330190</id>
    <title>EUVD-2026-330190</title>
    <updated>2026-10-04T04:22:26.929539+00:00</updated>
    <content>EUVD-2026-330190</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-330190"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2026-11379</id>
    <title>fkie_cve-2026-11379</title>
    <updated>2026-10-04T04:22:26.929550+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>GitLab has remediated an issue in GitLab EE affecting all versions from 13.11 prior to 18.11.6, 19.0 prior to 19.0.3, and 19.1 prior to 19.1.1 in which incorrect authorization in DAST site profile management could allow a user with Developer role to exfiltrate DAST site profile secrets under certain conditions.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2026-11379"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-9mc7-w3h9-cmmf</id>
    <title>GHSA-9mc7-w3h9-cmmf</title>
    <updated>2026-10-04T04:22:26.929572+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>GitLab has remediated an issue in GitLab EE affecting all versions from 13.11 prior to 18.11.6, 19.0 prior to 19.0.3, and 19.1 prior to 19.1.1 in which incorrect authorization in DAST site profile management could allow a user with Developer role to exfiltrate DAST site profile secrets under certain conditions.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-9mc7-w3h9-cmmf"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ncsc-2026-0211</id>
    <title>NCSC-2026-0211 — Kwetsbaarheden verholpen in GitLab Community Edition en Enterprise Edition</title>
    <updated>2026-10-04T04:22:26.929588+00:00</updated>
    <content>NCSC-2026-0211</content>
    <link href="https://cve.radiocsirt.org/vuln/ncsc-2026-0211"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2070</id>
    <title>WID-SEC-W-2026-2070 — GitLab CE/EE: Mehrere Schwachstellen</title>
    <updated>2026-10-04T04:22:26.929616+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Ein Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder Cross-Site-Scripting-Angriffe durchzuführen.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2070"/>
  </entry>
</feed>
