Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 7.8 THN:AD3AD8530F9...

Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited to Gain Root Access_THN:AD3AD8530F92B6335CE622AD7B31FDE5

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg3UeGaI_Ej8KFu7-vQHTOuoohYdx04xIdI3W2B6JjCdaTSR6m-y1PAZ-aes-tH9nxtPGO2sFUiu1NwYkwT5s...

N/A N/A THN
MEDIUM 4.4 CVE-2026-8330

Insertion of Sensitive Information into Log File in GitLab_CVE-2026-8330

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.3 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that unde...

GitLab GitLab 9.3 CVE
MEDIUM 4.3 CVE-2026-5952

Incorrect Authorization in GitLab_CVE-2026-5952

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that un...

GitLab GitLab 17.11 CVE
MEDIUM 4.3 CVE-2026-5796

Incorrect Authorization in GitLab_CVE-2026-5796

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.6 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that und...

GitLab GitLab 13.6 CVE
MEDIUM 5.4 CVE-2026-5309

Authorization Bypass Through User-Controlled Key in GitLab_CVE-2026-5309

GitLab has remediated an issue in GitLab EE affecting all versions from 18.6 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under ...

GitLab GitLab 18.6 CVE
LOW 3.1 CVE-2026-3176

Missing Authorization in GitLab_CVE-2026-3176

GitLab has remediated an issue in GitLab EE affecting all versions from 18.6 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under ...

GitLab GitLab 18.6 CVE
MEDIUM 5.3 CVE-2026-2238

Missing Authorization in GitLab_CVE-2026-2238

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.5 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that und...

GitLab GitLab 17.5 CVE
MEDIUM 4.3 CVE-2026-1606

Improper Control of Generation of Code (‘Code Injection’) in GitLab_CVE-2026-1606

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.8 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that und...

GitLab GitLab 14.8 CVE
HIGH 8.7 CVE-2026-13311

shell-quote parse() is quadratic in token count, enabling denial of service_CVE-2026-13311

shell-quote prior to 1.8.5 finalizes parsed tokens in parse() using Array.prototype.concat as a reduce accumulator, which reallocates and copies th...

ljharb shell-quote CVE
HIGH 8.6 CVE-2026-12053

Insertion of Sensitive Information into Log File in GitLab_CVE-2026-12053

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.1 that under certain conditions could have allowed a user ...

GitLab GitLab 19.1 CVE