258
CVEs
17
Critical
71
High
1
KEV
74
PoC
28
Unpatched C/H
65.5%
Patch Rate
0.1%
Avg EPSS
Severity Breakdown
CRITICAL
17
HIGH
71
MEDIUM
134
LOW
35
Monthly CVE Trend
Affected Products (30)
Open Redirect
19
Kubernetes
13
Ubuntu
13
Linux Kernel
6
Docker
6
Node.js
5
Gitea
5
Jwt Attack
5
Mattermost
4
Debian Linux
4
Github Branch Source
3
Session Fixation
3
Gitlab Authentication
3
Java
3
Gitlab Shell
3
Gitlab Vscode Extension
2
Runner
2
Gitlab Ai Gateway
2
Gitlab Oauth
2
Gitlab Hook
2
Grafana
2
Teamcity
2
Coolify
2
Redis
2
Violation Comments To Gitlab
2
AI / ML
2
Drawio
1
Oauth2 Proxy
1
Kramdown
1
Communications Cloud Native Core Policy
1
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-85706 | Unauthenticated arbitrary file read in GitLab CE/EE lets remote attackers retrieve files from the GitLab server via the repository commits API, which fails to confine paths and does not enforce authentication. All 18.7 releases through 19.3.2 are affected across the fix lines (before 19.1.8, 19.2.6, and 19.3.2). This is confirmed actively exploited (CISA KEV) and publicly available exploit code exists, making it an emergency-patch priority for any internet-reachable GitLab instance. | CRITICAL | 10.0 | 1.1% | 141 |
KEV
PoC
|
| CVE-2026-87719 | Sensitive credential and configuration disclosure in GitLab Enterprise Edition allows an authenticated user with Duo Chat access to exfiltrate Advanced Search (Elasticsearch) instance configurations and stored credentials by supplying a specially crafted GraphQL subscription argument that bypasses serialization and forces an internal server object lookup. It affects EE 18.3 through 19.1.8, 19.2 through 19.2.6, and 19.3 through 19.3.2, was reported by GitLab, and publicly available exploit code exists (HackerOne #4012289). No CISA KEV listing at time of analysis, so this is POC-backed but not confirmed as actively exploited. | CRITICAL | 9.9 | 0.6% | 70 |
PoC
|
| CVE-2026-75871 | Server-side request forgery in the GitLab AI Gateway (Duo Agent Platform) lets an authenticated user redirect outbound model requests to an attacker-controlled endpoint by supplying a crafted inline flow configuration that overrides the HTTP Host header, exfiltrating Google Cloud Vertex service credentials and private signing keys. It affects AI Gateway 18.10 through 19.0.11, 19.1 through 19.1.6, and 19.2 through 19.2.1. Publicly available exploit code exists (HackerOne #3945100); EPSS is low at 0.19% and it is not in CISA KEV. | CRITICAL | 9.6 | 0.2% | 68 |
PoC
|
| CVE-2026-61559 | We need answer JSON only. Need synthesize. Need parse all data. Let's inspect input. CVE-2026-61559. Product @zereight/mcp-gitlab. Description SSRF credential theft via header when ENABLE_DYNAMIC_API_URL=true. CVSS 9.6 vector AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N. CWE-918. Multi-source: POC publicly, patch available, reported by GH. Tags SSRF, Gitlab. ENISA. Affected versions gitlab-mcp 0.0.1, <2.1.27. References commit, PR, release, GHSA. Source diff. GHSA advisory says severity CVSS 8.5 but NVD/EUVD says 9.6. Need note discrepancy perhaps. Patch in 2.1.27. Need risk assessment with all signals. EPSS/KEV? Input not explicitly listed. KEV status absent. EPSS absent. Need state EPSS not provided; KEV not listed/unknown. Since no KEV and POC public, use "publicly available exploit code exists". Not active exploited. Need ensure no "in the wild". Patch status exact 2.1.27. CPE? There is no CPE strings explicitly, but EUVD affected versions. Product name "gitlab-mcp" / "@zereight/mcp-gitlab". Need product_name 1-3 words: "GitLab MCP" or "mcp-gitlab"? Product name probably "@zereight/mcp-gitlab" is npm package. But field says 1-3 words. Include maybe "GitLab MCP server". Better "mcp-gitlab" or "@zereight/mcp-gitlab" is 1 word? Let's use "GitLab MCP" maybe. Specific product. Could be "mcp-gitlab". Need 1-3 words only. "GitLab MCP Server" is 3 words. Use that? The primary product is npm package "@zereight/mcp-gitlab". As product_name maybe "mcp-gitlab". They gave examples "nginx-ui". So "gitlab-mcp" maybe. We'll choose "gitlab-mcp". Need plain text strings. Data quality flags array can be [] if no concrete issues. Need maybe flag missing tag? They have tags SSRF and Gitlab. Is "Gitlab" correct? The product is GitLab MCP server. Tag "Gitlab" okay though maybe wrong vendor? The vendor is zereight, not GitLab. Tag "Gitlab" generic platform? Hmm data_quality_flags only concrete wrong. Maybe no flag. Could flag missing tag "npm" or "mcp"? But not required. Could flag "mislabeled | CRITICAL | 9.6 | – | 68 |
PoC
|
| CVE-2026-19478 | Unauthenticated data tampering in GitLab CE/EE (18.2-18.11.10, 19.0-19.0.7, 19.1-19.1.5, 19.2-19.2.3) lets a remote attacker modify or delete public projects and user data by abusing a GraphQL directive, per CVE-2026-19478 (CVSS 9.4). The flaw was self-reported by GitLab and publicly available exploit code exists via a HackerOne disclosure, though it is not listed in CISA KEV. Impact is weighted toward integrity and availability rather than data theft (CVSS C:L/I:H/A:H). | CRITICAL | 9.1 | 0.7% | 66 |
PoC
|
| CVE-2026-16627 | Stored cross-site scripting in GitLab CE/EE 19.2 before 19.2.2 lets an authenticated user holding only developer-role permissions inject unsanitized HTML that executes in the browser of a higher-privileged user who opens a CI job modal, enabling privilege escalation. Publicly available exploit code exists (HackerOne report #3880796), though EPSS is modest at 0.30% (22nd percentile) and CISA SSVC records no observed exploitation. The high CVSS 9.0 is driven by a scope change and total confidentiality/integrity/availability impact once the payload runs in a victim's session. | CRITICAL | 9.0 | 0.3% | 65 |
PoC
|
| CVE-2026-10053 | Remote code execution in GitLab CE/EE package registry exposes instances across three active version branches to full host compromise by an authenticated low-privilege user. Path traversal (CWE-22) in the package registry component allows directory escape and arbitrary file write under certain server-side conditions, with CVSS scope change (S:C) confirming that impact extends beyond the GitLab application to the underlying host. A publicly available exploit exists via HackerOne report 3754194, though this vulnerability is not listed in the CISA KEV catalog at time of analysis. | HIGH | 8.8 | 0.7% | 65 |
PoC
|
| CVE-2026-48801 | Denial of service in linkify-it (npm) through v5.0.0 lets remote unauthenticated attackers wedge a rendering worker by submitting tens of KB of repeated email/link-like text. The core public API LinkifyIt.prototype.match runs an O(N²) scan loop that re-slices the input and re-runs unanchored fuzzy regex searches once per match, so 64 KB of "a@b.com" burns ~2.5 s of single-threaded CPU and 128 KB ~10 s. The flaw is inherited by markdown-it (~21.6M weekly npm downloads) whenever linkify:true is set, exposing forums, chat, wikis and AI chat UIs; publicly available exploit code (a PoC in the GHSA advisory) exists, but there is no evidence of active exploitation. | HIGH | 8.7 | 0.4% | 64 |
PoC
|
| CVE-2026-15216 | Stored or reflected cross-site scripting in GitLab CE/EE's analytics dashboard allows an authenticated attacker with low privileges to inject malicious scripts into pagination controls, executing in the browser context of any user who views the affected page. Affected versions span 18.2 through 19.2.1 across all three supported release trains. A publicly available proof-of-concept exists via HackerOne report 3830061; the Changed scope (S:C) and High C/I impacts elevate real-world risk significantly beyond a typical low-privilege XSS. | HIGH | 8.7 | 0.3% | 64 |
PoC
|
| CVE-2026-15217 | Stored cross-site scripting in GitLab CE/EE's analytics dashboard component allows an authenticated low-privilege user to inject malicious JavaScript into table cell content that executes in the browsers of other users who view the affected dashboard. The scope change (S:C in CVSS) confirms the impact crosses security boundaries, enabling session hijacking, credential theft, or unauthorized API actions on behalf of victims including administrators. A publicly available proof-of-concept exploit exists via HackerOne report #3830478; no confirmed active exploitation in CISA KEV at time of analysis. | HIGH | 8.7 | 0.3% | 64 |
PoC
|
| CVE-2026-8589 | Stored cross-site scripting and account integrity abuse in GitLab Enterprise Edition versions 13.1.4 through 18.10.7, 18.11 prior to 18.11.5, and 19.0 prior to 19.0.2 allows an authenticated low-privileged user to inject unsanitized input into certain group setting fields and add unauthorized email addresses to a targeted user's account. Publicly available exploit code exists via a HackerOne report, though EPSS exploitation probability remains very low at 0.02% and the SSVC framework rates current exploitation as 'none' with total technical impact when successful. | HIGH | 8.7 | 0.0% | 64 |
PoC
|
| CVE-2026-10087 | Stored cross-site scripting in GitLab Enterprise Edition's Analytics Dashboard allows an authenticated developer-role user to execute arbitrary client-side JavaScript in the browser of a targeted user, leveraging improper input sanitization. The flaw affects all 17.1 through 18.10.x, 18.11.x, and 19.0.x branches before fixed releases, and publicly available exploit code exists via a HackerOne report, raising the realistic risk of opportunistic abuse against multi-tenant GitLab instances. | HIGH | 8.7 | 0.0% | 64 |
PoC
|
| CVE-2026-6552 | Account takeover in GitLab Enterprise Edition versions 15.5 through 19.0.2 allows an authenticated group Owner to hijack other group members' accounts through improper authorization in the Group SAML identity management functionality. Publicly available exploit code exists via a HackerOne report, and GitLab released patched versions 18.10.8, 18.11.5, and 19.0.2 on 2026-06-10. The flaw stems from CWE-639 (Authorization Bypass Through User-Controlled Key) and yields a scope-changing high-impact compromise per CVSS 3.1. | HIGH | 8.7 | 0.0% | 64 |
PoC
|
| CVE-2026-15423 | Improper authorization in GitLab CE/EE pipeline reference validation allows authenticated developer-role users to execute CI/CD pipelines on protected branches they lack push permissions to access, effectively bypassing branch protection policies. All GitLab versions from 19.0 through 19.2 are affected until the respective patch releases. A publicly available exploit exists via HackerOne report #3832069, though no confirmed active exploitation has been recorded in the CISA KEV catalog at time of analysis. | HIGH | 8.5 | 0.3% | 63 |
PoC
|
| CVE-2026-57894 | Server-side request forgery and internal repository exfiltration in Gitea before 1.27.0 lets a low-privileged authenticated user bypass the migration URL allow/block list by supplying a permitted public Git URL that HTTP-redirects the server's git subprocess to an otherwise-blocked internal endpoint. Because Gitea validates only the originally submitted URL while git runs with its default http.followRedirects=initial, the redirected internal Git repository is cloned into an attacker-controlled repository, and pull mirrors keep re-fetching it on schedule. No public exploit identified at time of analysis; a vendor-authored local proof-of-concept confirmed the redirect is followed to 127.0.0.1, and EPSS/KEV data were not supplied. | HIGH | 8.5 | 0.2% | 63 |
PoC
|