https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:59:19.996235+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-gitlab-2026-6552 BIT-gitlab-2026-6552 — Authorization Bypass Through User-Controlled Key in GitLab 2026-10-03T13:59:20.000514+00:00

Affected: Bitnami: gitlab

GitLab has remediated an issue in GitLab EE affecting all versions from 15.5 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user with group Owner role to take over another group member's GitLab account due to improper authorization in the Group SAML identity management functionality.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0733 certfr-2026-avi-0733 — De multiples vulnérabilités ont été découvertes dans GitLab. Certaines d'entre elles permettent à un attaquant de provo… 2026-10-03T13:59:20.000559+00:00 certfr-2026-avi-0733 https://cve.radiocsirt.org/vuln/fkie_cve-2026-6552 fkie_cve-2026-6552 2026-10-03T13:59:20.000579+00:00

Rejected reason: This CVE ID has been rejected. GitLab determined that the reported behavior does not constitute a vulnerability: linking a group SAML identity requires the user to explicitly consent to that group controlling their GitLab account for sign-in, and management of group SAML identities by a group Owner is therefore expected behavior rather than an authorization bypass. No GitLab version was affected.

 https://cve.radiocsirt.org/vuln/ghsa-r82j-g6q9-mvx8 GHSA-r82j-g6q9-mvx8 2026-10-03T13:59:20.000602+00:00

GitLab has remediated an issue in GitLab EE affecting all versions from 15.5 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user with group Owner role to take over another group member's GitLab account due to improper authorization in the Group SAML identity management functionality.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0196 NCSC-2026-0196 — Kwetsbaarheden verholpen in GitLab Enterprise Edition 2026-10-03T13:59:20.000619+00:00 NCSC-2026-0196 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-6552 UBUNTU-CVE-2026-6552 2026-10-03T13:59:20.000642+00:00

Affected: Ubuntu:16.04:LTS: gitlab

Rejected reason: This CVE ID has been rejected. GitLab determined that the reported behavior does not constitute a vulnerability: linking a group SAML identity requires the user to explicitly consent to that group controlling their GitLab account for sign-in, and management of group SAML identities by a group Owner is therefore expected behavior rather than an authorization bypass. No GitLab version was affected.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1886 WID-SEC-W-2026-1886 — GitLab: Mehrere Schwachstellen 2026-10-03T13:59:20.000662+00:00

Ein Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren, serverseitige Request-Forgery- und Cross-Site-Scripting-Angriffe durchzuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.