CVE-2026-11379

GitLab Security Advisory CVE-2026-11379 affects GitLab EE. The issue is an incorrect authorization flaw in DAST site profile management that could allow a user with the Developer role to exfiltrate DAST site profile secrets under certain conditions. Affected versions include all GitLab EE release...

CVE-2026-11379

GitLab has remediated an issue in GitLab EE affecting all versions from 13.11 prior to 18.11.6, 19.0 prior to 19.0.3, and 19.1 prior to 19.1.1 in which incorrect authorization in DAST site profile management could allow a user with Developer role to exfiltrate DAST site profile secrets under...

EUVD-2026-39170

GitLab has remediated an issue in GitLab EE affecting all versions from 13.11 prior to 18.11.6, 19.0 prior to 19.0.3, and 19.1 prior to 19.1.1 in which incorrect authorization in DAST site profile management could allow a user with Developer role to exfiltrate DAST site profile secrets under...

CVE-2026-11379 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 13.11 prior to 18.11.6, 19.0 prior to 19.0.3, and 19.1 prior to 19.1.1 in which incorrect authorization in DAST site profile management could allow a user with Developer role to exfiltrate DAST site profile secrets under...

CVE-2026-11379 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 13.11 prior to 18.11.6, 19.0 prior to 19.0.3, and 19.1 prior to 19.1.1 in which incorrect authorization in DAST site profile management could allow a user with Developer role to exfiltrate DAST site profile secrets under...

CVE-2026-10043

creationtimestamp| type| source ---|---|--- 2026-06-25 02:41:03+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mp3fq6z37d22...

CVE-2026-57589

creationtimestamp| type| source ---|---|--- 2026-06-25 02:29:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3f447rn42l 2026-07-08 01:10:04+00:00| seen| https://bsky.app/profile/lobsters-feed.bsky.social/post/3mq3wpi5hat2y 2026-07-08 10:01:20+00:00| seen|...

CVE-2026-55762

creationtimestamp| type| source ---|---|--- 2026-06-25 02:23:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3ere6s6u2b...

CVE-2026-9773

creationtimestamp| type| source ---|---|--- 2026-06-25 01:58:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3dekt7jy2b 2026-06-30 21:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpjvulf32l2u...

CVE-2026-9784

creationtimestamp| type| source ---|---|--- 2026-06-25 01:54:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3d4twjis25 2026-06-30 17:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpjk52nhe42g...

CVE-2026-9155

creationtimestamp| type| source ---|---|--- 2026-06-25 01:50:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3cw4ykjs2k 2026-06-30 15:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpjbqtv6a42g 2026-06-30 15:07:09+00:00| seen|...

CVE-2026-9782

creationtimestamp| type| source ---|---|--- 2026-06-25 01:32:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3bvqjsud2g 2026-06-30 16:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpjgrrwxou2v...

CVE-2026-54067

creationtimestamp| type| source ---|---|--- 2026-06-25 01:27:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3bm7kwmr25 2026-07-10 19:52:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqcwdlr5ns2t 2026-07-10 20:35:21+00:00| published-proof-of-concept|...

CVE-2020-15322

creationtimestamp| type| source ---|---|--- 2026-06-25 00:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp36sknzvj2y...

PT-2026-52197

Name of the Vulnerable Software and Affected Versions GitLab EE versions 13.11 through 18.11.5 GitLab EE versions 19.0 through 19.0.2 GitLab EE versions 19.1 Description Incorrect authorization in DAST Dynamic Application Security Testing site profile management allows a user with the Developer...

CVE-2026-39900

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Reflected XSS via tab parameter in the authprofile.php JavaScript context. This issue has been fixed in version 1.2.31...

CVE-2026-39900

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Reflected XSS via tab parameter in the authprofile.php JavaScript context. This issue has been fixed in version 1.2.31...

UBUNTU-CVE-2026-39900

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Reflected XSS via tab parameter in the authprofile.php JavaScript context. This issue has been fixed in version 1.2.31...

CVE-2026-13201

creationtimestamp| type| source ---|---|--- 2026-06-24 22:41:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2yegi7gl25...

CVE-2026-39900 Cacti: Reflected XSS via tab parameter in auth_profile.php JavaScript context

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Reflected XSS via tab parameter in the authprofile.php JavaScript context. This issue has been fixed in version 1.2.31...