https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:56:00.686969+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-gitlab-2026-9204 BIT-gitlab-2026-9204 — Server-Side Request Forgery (SSRF) in GitLab 2026-10-03T21:56:00.691591+00:00

Affected: Bitnami: gitlab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user to read arbitrary files from the Gitaly server and access internal network resources during repository import, due to insufficient validation of secondary URLs.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0733 certfr-2026-avi-0733 — De multiples vulnérabilités ont été découvertes dans GitLab. Certaines d'entre elles permettent à un attaquant de provo… 2026-10-03T21:56:00.691642+00:00 certfr-2026-avi-0733 https://cve.radiocsirt.org/vuln/euvd-2026-326575 EUVD-2026-326575 2026-10-03T21:56:00.691662+00:00 EUVD-2026-326575 https://cve.radiocsirt.org/vuln/fkie_cve-2026-9204 fkie_cve-2026-9204 2026-10-03T21:56:00.691675+00:00

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user to read arbitrary files from the Gitaly server and access internal network resources during repository import, due to insufficient validation of secondary URLs.

 https://cve.radiocsirt.org/vuln/ghsa-c4m8-pv9j-v7mm GHSA-c4m8-pv9j-v7mm 2026-10-03T21:56:00.691696+00:00

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user to read arbitrary files from the Gitaly server and access internal network resources during repository import, due to insufficient validation of secondary URLs.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0196 NCSC-2026-0196 — Kwetsbaarheden verholpen in GitLab Enterprise Edition 2026-10-03T21:56:00.691711+00:00 NCSC-2026-0196 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-9204 UBUNTU-CVE-2026-9204 2026-10-03T21:56:00.691735+00:00

Affected: Ubuntu:16.04:LTS: gitlab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user to read arbitrary files from the Gitaly server and access internal network resources during repository import, due to insufficient validation of secondary URLs.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1886 WID-SEC-W-2026-1886 — GitLab: Mehrere Schwachstellen 2026-10-03T21:56:00.691753+00:00

Ein Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren, serverseitige Request-Forgery- und Cross-Site-Scripting-Angriffe durchzuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.