https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:28:00.744397+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-07488 bdu:2026-07488 2026-10-03T10:28:00.749829+00:00 bdu:2026-07488 https://cve.radiocsirt.org/vuln/bit-gitlab-2026-4868 BIT-gitlab-2026-4868 — Authorization Bypass Through User-Controlled Key in GitLab 2026-10-03T10:28:00.749900+00:00

Affected: Bitnami: gitlab

GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that, under certain conditions, could have allowed an authenticated user to cause specific Duo AI workflows to run under another user's identity due to improper user identity resolution when triggering Duo AI workflow runners.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0658 certfr-2026-avi-0658 — De multiples vulnérabilités ont été découvertes dans GitLab. Elles permettent à un attaquant de provoquer un déni de se… 2026-10-03T10:28:00.749938+00:00 certfr-2026-avi-0658 https://cve.radiocsirt.org/vuln/euvd-2026-322310 EUVD-2026-322310 2026-10-03T10:28:00.749957+00:00 EUVD-2026-322310 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4868 fkie_cve-2026-4868 2026-10-03T10:28:00.749969+00:00

GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that, under certain conditions, could have allowed an authenticated user to cause specific Duo AI workflows to run under another user's identity due to improper user identity resolution when triggering Duo AI workflow runners.

 https://cve.radiocsirt.org/vuln/ghsa-64q9-48cg-f6vv GHSA-64q9-48cg-f6vv 2026-10-03T10:28:00.749992+00:00

GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that, under certain conditions, could have allowed an authenticated user to cause specific Duo AI workflows to run under another user's identity due to improper user identity resolution when triggering Duo AI workflow runners.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0168 NCSC-2026-0168 — Kwetsbaarheden verholpen in GitLab Community Edition en Enterprise Edition 2026-10-03T10:28:00.750008+00:00 NCSC-2026-0168 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-4868 UBUNTU-CVE-2026-4868 2026-10-03T10:28:00.750029+00:00

Affected: Ubuntu:16.04:LTS: gitlab

GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that, under certain conditions, could have allowed an authenticated user to cause specific Duo AI workflows to run under another user's identity due to improper user identity resolution when triggering Duo AI workflow runners.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1704 WID-SEC-W-2026-1704 — GitLab: Mehrere Schwachstellen 2026-10-03T10:28:00.750048+00:00

Ein Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Daten zu manipulieren, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.