PT-2026-120882

Name of the Vulnerable Software and Affected Versions GitLab EE versions 17.8 through 19.3.5 GitLab EE versions 19.4 through 19.4.2 GitLab EE versions 19.5 Description An issue exists where an authenticated user with read-only permissions can permanently delete existing vulnerability records. Thi...

PT-2026-120887

Name of the Vulnerable Software and Affected Versions GitLab EE versions 17.4 through 19.3.5 GitLab EE versions 19.4 through 19.4.2 GitLab EE versions 19.5 Description Improper access control during approval rule synchronization allows an authenticated user to bypass a required merge request...

PT-2026-120879

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 15.0 through 19.3.5 GitLab CE/EE versions 19.4 through 19.4.2 GitLab CE/EE versions 19.5 through 19.5.0 Description An authenticated user without project membership can read the title of a confidential issue from a privat...

PT-2026-120880

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 17.6.5 through 19.3.5 GitLab CE/EE versions 19.4 through 19.4.2 GitLab CE/EE versions 19.5 through 19.5.0 Description An unauthenticated user can retrieve sensitive internal server credentials. This occurs due to improper...

PT-2026-120881

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 18.3 through 19.3.5 GitLab CE/EE versions 19.4 through 19.4.2 GitLab CE/EE versions 19.5 through 19.5.0 Description An unauthenticated user can poison a shared cache's OAuth/OIDC discovery document. This occurs because th...

PT-2026-120885

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 18.2 through 19.3.5 GitLab CE/EE versions 19.4 through 19.4.2 GitLab CE/EE versions 19.5 through 19.5.0 Description Insufficient scope enforcement on a GraphQL field allows an authenticated user possessing a read api-scop...

PT-2026-120883

Name of the Vulnerable Software and Affected Versions GitLab EE versions 17.8 through 19.3.5 GitLab EE versions 19.4 through 19.4.2 GitLab EE versions 19.5 Description Insufficient server-side validation in billing eligibility checks could allow an authenticated user to access paid AI features...

PT-2026-120888

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 10.1 through 19.3.5 GitLab CE/EE versions 19.4 through 19.4.2 GitLab CE/EE versions 19.5 through 19.5.0 Description An issue exists when OmniAuth SAML and LDAP auto-linking are both enabled. An authenticated user can take...

PT-2026-120800

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 7.0 through 18.11.12 GitLab CE/EE versions 19.0 through 19.0.9 GitLab CE/EE versions 19.1 through 19.1.8 GitLab CE/EE versions 19.2 through 19.2.8 GitLab CE/EE versions 19.3 through 19.3.5 GitLab CE/EE versions 19.4 throu...

PT-2026-120886

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 15.10 through 19.3.5 GitLab CE/EE versions 19.4 through 19.4.2 GitLab CE/EE versions 19.5 through 19.5.0 Description An authenticated user can read milestone metadata, such as titles, descriptions, and full project paths,...

PT-2026-120889

Name of the Vulnerable Software and Affected Versions GitLab EE versions 12.0 through 19.3.5 GitLab EE versions 19.4 through 19.4.2 GitLab EE versions 19.5 through 19.5.0 Description An issue exists where an authenticated user could grant or accept project and group membership outside the control...

PT-2026-120878

Name of the Vulnerable Software and Affected Versions GitLab EE versions 19.2 through 19.3.5 GitLab EE versions 19.4 through 19.4.2 GitLab EE versions 19.5 through 19.5.0 Description Insufficient granularity of admin-lock enforcement controls allows an authenticated user with group Owner...

GitLab 15.10 < 19.3.6 / 19.4 < 19.4.3 / 19.5 < 19.5.1 (CVE-2026-13319)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, could have allowed an authenticated to read milestone...

GitLab 7.0 < 18.11.13 / 19.0 < 19.0.10 / 19.1 < 19.1.9 / 19.2 < 19.2.9 / 19.3 < 19.3.6 / 19.4 < 19.4.3 / 19.5 < 19.5.1 (CVE-2026-110264)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and...

GitLab 17.6.5 < 19.3.6 / 19.4 < 19.4.3 / 19.5 < 19.5.1 (CVE-2026-105777)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6.5 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, an unauthenticated user coul...

GitLab 18.3 < 19.3.6 / 19.4 < 19.4.3 / 19.5 < 19.5.1 (CVE-2026-112212)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, an unauthenticated user could...

GitLab 17.8 < 19.3.6 / 19.4 < 19.4.3 / 19.5 < 19.5.1 (CVE-2026-112378)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated...

GitLab 15.0 < 19.3.6 / 19.4 < 19.4.3 / 19.5 < 19.5.1 (CVE-2026-105711)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when a merge request in a public project referenced a...

GitLab 19.2 < 19.3.6 / 19.4 < 19.4.3 / 19.5 < 19.5.1 (CVE-2026-103515)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab EE affecting all versions from 19.2 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when an instance administrator locked a group's Duo...

GitLab 18.2 < 19.3.6 / 19.4 < 19.4.3 / 19.5 < 19.5.1 (CVE-2026-12664)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an...