Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
8.7 HIGH
CVE-2026-92883 — Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in G…

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authen…

gitlab | Remote | Cross-Site Scripting
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
4.2 MEDIUM
CVE-2026-92528 — Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 16.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authentic…

gitlab | Remote | Authorization
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
5.3 MEDIUM
CVE-2026-85529 — Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthe…

gitlab | Remote | Authorization
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
5.3 MEDIUM
CVE-2026-84284 — Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 19.2.8, 19.3 before 19.3.6, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauth…

gitlab | Remote | Authorization
Oct 13, 2026 Oct 22, 2026
Oct 13, 2026
Oct 22, 2026
3.1 LOW
CVE-2026-82632 — Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authent…

gitlab | Remote | Authorization
Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
7.7 HIGH
CVE-2026-81839 — Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 18.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authentica…

gitlab | Remote | Authorization
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
5.8 MEDIUM
CVE-2026-7767 — URL Redirection to Untrusted Site ('Open Redirect') in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authen…

gitlab | Remote | Server-Side Request Forgery
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
4.2 MEDIUM
CVE-2026-78335 — Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authent…

gitlab | Remote | Authorization
Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
4.3 MEDIUM
CVE-2026-6567 — Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.8 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authent…

gitlab | Remote | Authorization
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
4.2 MEDIUM
CVE-2026-5954 — Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to …

gitlab | Remote | Authorization
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
8.4 HIGH
CVE-2026-35001 — OpenS100 S-102 Parser Integer Overflow Heap Buffer Overflow

OpenS100 through commit 2b1dafc contains an integer overflow vulnerability in the S-102 Bathymetric Surface parser. An attacker can supply a crafted S-102 HDF5 file with malicious grid dimension meta…

| Memory Corruption
Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
8.5 HIGH
CVE-2026-16301 — Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authent…

gitlab | Remote | Authorization
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
5.3 MEDIUM
CVE-2026-16275 — Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.4 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthe…

gitlab | Remote | Authorization
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
8.2 HIGH
CVE-2026-14814 — Permissive Regular Expression in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to poison cac…

gitlab | Remote | Misconfiguration
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
4.3 MEDIUM
CVE-2026-14552 — Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authent…

gitlab | Remote | Authorization
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
4.3 MEDIUM
CVE-2026-14210 — Insufficient Granularity of Access Control in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authen…

gitlab | Remote | Authorization
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
7.5 HIGH
CVE-2026-108956 — code-projects Online Reviewer System User Update btn_functions.php sql injection

A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /reviewer/system/system/admins/manage/users/btn_functions.php of th…

online_reviewer_system | Remote | Injection
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
5.3 MEDIUM
CVE-2026-108955 — Tiiny-AI PowerInfer GGUF ggml.c gguf_init_from_file out-of-bounds

A vulnerability was determined in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4. Impacted is the function gguf_init_from_file of the file ggml.c of the component GGUF Parser. Thi…

powerinfer | Memory Corruption
Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
7.5 HIGH
CVE-2026-108954 — k2-fsa sherpa-onnx Offline Transducer Greedy Search Decoder offline-transducer-greedy-sea…

A vulnerability was found in k2-fsa sherpa-onnx up to 1.13.8. This issue affects the function OfflineTransducerGreedySearchDecoder::Decode of the file sherpa-onnx/csrc/offline-transducer-greedy-searc…

sherpa-onnx | Remote | Memory Corruption
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
5.5 MEDIUM
CVE-2026-108948 — code-projects Online Reviewer System User Profile Update btn_functions.php dynamically-de…

A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of the file /reviewer/system/system/admins/manage/users/btn_functions.php of the co…

online_reviewer_system | Remote | Authentication
Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
Showing 20 of 16726 Results