The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to the improper handling of logical operations, allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the improper handling of logical operations. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from the ability to bypass authentication by using a user-controlled key. This allows attackers to compromise the integrity of the protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab relates to bypassing authentication by using a key controlled by the user. Exploiting this vulnerability allows an attacker to remotely compromise the integrity of the protected information...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to the lack of authentication, allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to potentially compromise the integrity of the protected information...

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from the possibility of circumventing access control mechanisms, allowing unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the possibility of circumventing access control mechanisms. Exploiting this vulnerability can allow an intruder operating remotely to gain unauthorized access to protected information...

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from a violation of access control checks, allowing attackers to compromise the integrity of the protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to a violation of access control checking procedures. Exploiting this vulnerability allows an attacker operating remotely to compromise the integrity of the protected information...

The vulnerability of the Craft CMS content management system, related to the lack of authentication, allows a hacker to disclose protected information.

The vulnerability of the Craft CMS content management system is related to the lack of authentication. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

The vulnerability of the Grafana monitoring and surveillance platform lies in the unauthorized access to the account after the token has expired, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Grafana monitoring and observation platform relates to incorrect access to the account after the token’s expiration period. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from the ability to bypass authentication by using an alternative path or channel. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected...

BIT-GITLAB-2026-1338 Authorization Bypass Through User-Controlled Key in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with developer-role permissions to delete protected container registry tags due to improper authorization...

PT-2026-41665

Authorization Bypass vulnerability in Creartia's ICMS software could allow an attacker to gain unauthorized access to protected features by manipulating the HTTP redirect headers of the login process, causing the script to continue running and enabling privilege escalation without the need for...

The vulnerability of corporate email for VK WorkMail, related to insufficient input data verification, allows attackers to compromise the integrity of the protected information.

The vulnerability of corporate email for VK WorkMail is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

The vulnerability of the Snowflake Node and MySQL Node components of the N8n automation platform allows unauthorized access for reading, modifying, and deleting protected information.

The vulnerability of the Snowflake Node and MySQL Node components of the N8n automation platform for workflow processes is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to gain unauthorized access to read, modify, and...

The vulnerability of the Next.js web application development software platform, related to bypassing the authentication process by using an alternative path or channel, allows attackers to circumvent existing security mechanisms and gain unauthorized access to protected information.

The vulnerability of the Next.js web application development software platform lies in the ability to bypass authentication procedures by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent existing security mechanisms and gain unauthorized...

The vulnerability of the user interface of the Cisco Catalyst SD-WAN Manager allows a intruder to gain unauthorized access to protected information.

The vulnerability of the user interface of the Cisco Catalyst SD-WAN Manager centralized system management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by...

The vulnerability of the Hosted Chat node’s Chat Trigger function on the N8n platform, which allows a perpetrator to gain unauthorized access to and modify protected information.

The vulnerability of the Hosted Chat node’s Chat Trigger function in the N8n platform, which is used for automating processes, is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to and...

Vulnerability of the Networking component: DNS browsers like Mozilla Firefox and the email client Thunderbird, which allow attackers to affect the accessibility of protected information.

The vulnerability of the Networking component: DNS browsers like Mozilla Firefox and the email client Thunderbird are vulnerable due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the accessibility of protected information...

Vulnerability of the Audio/Video component: The playback feature in Mozilla Firefox browsers and the Thunderbird email client allows attackers to compromise the accessibility of protected information.

The vulnerability of the Audio/Video component: The playback functions of Mozilla Firefox browsers and the Thunderbird email client are related to the handling of a zero pointer. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of the NSS component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to gain unauthorized access to protected information.

The vulnerability of the NSS component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected informatio...

The vulnerability of the Nginx UI server’s user interface allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Nginx UI server’s user interface relates to the unencrypted storage of critical information. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Next.js software platform for creating web applications stems from insufficient validation of requests on the server side. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Next.js web application development software platform is related to insufficient validation of requests at the server side. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...