CVE-2026-0723

GitLab CVE-2026-0723 affects GitLab CE/EE versions 18.6 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2. The issue allowed an attacker with knowledge of a victim’s credential ID to bypass two-factor authentication by submitting forged device responses. CVSSv3.1 base metrics: AV:N/AC:H/P...