Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
10.0 CRITICAL
CVE-2026-110264 — Integer Overflow or Wraparound in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and …

Remote | Memory Corruption
Oct 22, 2026 Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
0.0 NA
CVE-2026-114574 — massCodeIO massCode Local HTTP Service index.ts information disclosure

A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/main/api/index.ts of the component Local HTTP Service. Such manipulation leads …

masscode | Information Disclosure
Oct 21, 2026 Oct 21, 2026
Oct 21, 2026
Oct 21, 2026
6.8 MEDIUM
CVE-2026-12664 — Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an authent…

gitlab | Remote | Authorization
Oct 21, 2026 Oct 21, 2026
Oct 21, 2026
Oct 21, 2026
4.3 MEDIUM
CVE-2026-13319 — Authorization Bypass Through User-Controlled Key in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, could have allowed an authenticated to read milestone …

gitlab | Remote | Authorization
Oct 21, 2026 Oct 21, 2026
Oct 21, 2026
Oct 21, 2026
3.1 LOW
CVE-2026-14288 — Use of Incorrectly-Resolved Name or Reference in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticate…

gitlab | Remote | Authorization
Oct 21, 2026 Oct 21, 2026
Oct 21, 2026
Oct 21, 2026
8.2 HIGH
CVE-2026-15723 — Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in G…

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when OmniAuth SAML and LDAP auto-linking were both enab…

gitlab | Remote | Authentication
Oct 21, 2026 Oct 21, 2026
Oct 21, 2026
Oct 21, 2026
5.9 MEDIUM
CVE-2026-16255 — Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 12.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when the instance-wide SAML or LDAP membership lock was en…

gitlab | Remote | Authorization
Oct 21, 2026 Oct 21, 2026
Oct 21, 2026
Oct 21, 2026
2.7 LOW
CVE-2026-103515 — Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 19.2 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when an instance administrator locked a group's Duo availa…

gitlab | Remote | Authorization
Oct 21, 2026 Oct 21, 2026
Oct 21, 2026
Oct 21, 2026
3.5 LOW
CVE-2026-105711 — Use of Cache Containing Sensitive Information in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when a merge request in a public project referenced a c…

gitlab | Remote | Information Disclosure
Oct 21, 2026 Oct 21, 2026
Oct 21, 2026
Oct 21, 2026
4.3 MEDIUM
CVE-2026-105777 — Insertion of Sensitive Information Into Sent Data in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6.5 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, an unauthenticated user cou…

gitlab | Remote | Information Disclosure
Oct 21, 2026 Oct 21, 2026
Oct 21, 2026
Oct 21, 2026
4.3 MEDIUM
CVE-2026-112378 — Use of Less Trusted Source in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticate…

gitlab | Remote | Authorization
Oct 21, 2026 Oct 21, 2026
Oct 21, 2026
Oct 21, 2026
7.5 HIGH
CVE-2026-112212 — Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, an unauthenticated user could…

gitlab | Remote | Server-Side Request Forgery
Oct 21, 2026 Oct 21, 2026
Oct 21, 2026
Oct 21, 2026
3.1 LOW
CVE-2026-112326 — Improper Cleanup on Thrown Exception in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an authentica…

gitlab | Remote | Authorization
Oct 21, 2026 Oct 21, 2026
Oct 21, 2026
Oct 21, 2026
5.9 MEDIUM
CVE-2026-89052 — Hardcoded AES encryption key in Archer C6

A hardcoded cryptographic key management vulnerability exists in Archer C6 due to the use of a universal cryptographic key shared across devices. An attacker who obtains an encrypted configuration fi…

Remote | Cryptography
Oct 21, 2026 Oct 21, 2026
Oct 21, 2026
Oct 21, 2026
0.0 NA
CVE-2026-76531 — Files or Directories Accessible to External Parties in Splunk SOAR

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release tha…

soar | Path Traversal
Oct 21, 2026 Oct 21, 2026
Oct 21, 2026
Oct 21, 2026
0.0 NA
CVE-2026-76530 — Use of Non-Canonical URL Paths for Authorization Decisions in Splunk SOAR

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release tha…

soar | Authorization
Oct 21, 2026 Oct 21, 2026
Oct 21, 2026
Oct 21, 2026
0.0 NA
CVE-2026-76529 — Improper Protection of Alternate Path in Splunk SOAR

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release tha…

soar | Path Traversal
Oct 21, 2026 Oct 21, 2026
Oct 21, 2026
Oct 21, 2026
0.0 NA
CVE-2026-76528 — Protection Mechanism Failure in Splunk SOAR

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release tha…

soar | Misconfiguration
Oct 21, 2026 Oct 21, 2026
Oct 21, 2026
Oct 21, 2026
0.0 NA
CVE-2026-76527 — Improper Check or Handling of Exceptional Conditions in Splunk SOAR

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release tha…

soar | Misconfiguration
Oct 21, 2026 Oct 21, 2026
Oct 21, 2026
Oct 21, 2026
0.0 NA
CVE-2026-76526 — Improper Neutralization in Splunk SOAR

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release tha…

soar | Injection
Oct 21, 2026 Oct 21, 2026
Oct 21, 2026
Oct 21, 2026
Showing 20 of 16692 Results