https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 13:34:15 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-09849 bdu:2026-09849 https://cve.radiocsirt.org/vuln/bdu:2026-09849 https://cve.radiocsirt.org/vuln/bit-gitlab-2026-11827 <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>GitLab has remediated an issue in GitLab EE affecting all versions from 9.5 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user with maintainer-role permissions to obtain another user&#39;s stored credentials due to improper authorization controls.</p> <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>GitLab has remediated an issue in GitLab EE affecting all versions from 9.5 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user with maintainer-role permissions to obtain another user&#39;s stored credentials due to improper authorization controls.</p> https://cve.radiocsirt.org/vuln/bit-gitlab-2026-11827 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0850 certfr-2026-avi-0850 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0850 https://cve.radiocsirt.org/vuln/euvd-2026-335324 EUVD-2026-335324 https://cve.radiocsirt.org/vuln/euvd-2026-335324 https://cve.radiocsirt.org/vuln/fkie_cve-2026-11827 <p>GitLab has remediated an issue in GitLab EE affecting all versions from 9.5 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user with maintainer-role permissions to obtain another user&#39;s stored credentials due to improper authorization controls.</p> <p>GitLab has remediated an issue in GitLab EE affecting all versions from 9.5 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user with maintainer-role permissions to obtain another user&#39;s stored credentials due to improper authorization controls.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-11827 https://cve.radiocsirt.org/vuln/ghsa-mhr8-wccg-2q8g <p>GitLab has remediated an issue in GitLab EE affecting all versions from 9.5 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user with maintainer-role permissions to obtain another user&#39;s stored credentials due to improper authorization controls.</p> <p>GitLab has remediated an issue in GitLab EE affecting all versions from 9.5 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user with maintainer-role permissions to obtain another user&#39;s stored credentials due to improper authorization controls.</p> https://cve.radiocsirt.org/vuln/ghsa-mhr8-wccg-2q8g https://cve.radiocsirt.org/vuln/ncsc-2026-0222 NCSC-2026-0222 https://cve.radiocsirt.org/vuln/ncsc-2026-0222 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-11827 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>GitLab has remediated an issue in GitLab EE affecting all versions from 9.5 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user with maintainer-role permissions to obtain another user&#39;s stored credentials due to improper authorization controls.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>GitLab has remediated an issue in GitLab EE affecting all versions from 9.5 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user with maintainer-role permissions to obtain another user&#39;s stored credentials due to improper authorization controls.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-11827 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2265 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um beliebigen Code auszuführen, Cross-Site-Scripting durchzuführen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um beliebigen Code auszuführen, Cross-Site-Scripting durchzuführen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2265