https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:44:12.195119+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-10980 bdu:2025-10980 2026-10-02T10:44:12.199602+00:00 bdu:2025-10980 https://cve.radiocsirt.org/vuln/bit-gitlab-2025-2498 BIT-gitlab-2025-2498 — Insufficient Granularity of Access Control in GitLab 2026-10-02T10:44:12.199631+00:00

Affected: Bitnami: gitlab

An improper access control in Gitlab EE affecting all versions from 12.0 prior to 18.0.6, 18.1 prior to 18.1.4, and 18.2 prior to 18.2.2 that under certain conditions could have allowed users to view assigned issues from restricted groups by bypassing IP restrictions.

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0690 certfr-2025-avi-0690 — De multiples vulnérabilités ont été découvertes dans GitLab. Certaines d'entre elles permettent à un attaquant de provo… 2026-10-02T10:44:12.199661+00:00 certfr-2025-avi-0690 https://cve.radiocsirt.org/vuln/euvd-2026-249691 EUVD-2026-249691 2026-10-02T10:44:12.199678+00:00 EUVD-2026-249691 https://cve.radiocsirt.org/vuln/fkie_cve-2025-2498 fkie_cve-2025-2498 2026-10-02T10:44:12.199689+00:00

An improper access control in Gitlab EE affecting all versions from 12.0 prior to 18.0.6, 18.1 prior to 18.1.4, and 18.2 prior to 18.2.2 that under certain conditions could have allowed users to view assigned issues from restricted groups by bypassing IP restrictions.

 https://cve.radiocsirt.org/vuln/ghsa-vcvr-9mwv-w2g3 GHSA-vcvr-9mwv-w2g3 2026-10-02T10:44:12.199709+00:00

An improper access control in Gitlab EE affecting all versions from 12.0 prior to 18.0.6, 18.1 prior to 18.1.4, and 18.2 prior to 18.2.2 that under certain conditions could have allowed users to view assigned issues from restricted groups by bypassing IP restrictions.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-2498 UBUNTU-CVE-2025-2498 2026-10-02T10:44:12.199723+00:00

Affected: Ubuntu:16.04:LTS: gitlab

An improper access control in Gitlab EE affecting all versions from 12.0 prior to 18.0.6, 18.1 prior to 18.1.4, and 18.2 prior to 18.2.2 that under certain conditions could have allowed users to view assigned issues from restricted groups by bypassing IP restrictions.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1816 WID-SEC-W-2025-1816 — GitLab: Mehrere Schwachstellen 2026-10-02T10:44:12.199740+00:00

Ein Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, um Benutzerkonten zu übernehmen, um einen Denial of Service Angriff durchzuführen, um Dateien zu manipulieren, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.