Known vulnerabilities in GitLab Enterprise Edition 19.2.7

Version: 19.2.7
Software CPE: cpe:2.3:a:gitlab:gitlab-ee:*:*:*:*:*:*:*:*
Total vulnerabilities: 24
Public exploits: 0
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting GitLab Enterprise Edition version 19.2.7 GitLab Enterprise Edition 19.2.7 is affected by 24 vulnerabilities: 1 high, 4 medium, 19 low Critical High Medium Low

Vulnerabilities (24)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU154171 - Incorrect Authorization
CVE-2026-103549
CWE-863 Low
No
No
19.2.8, 19.3.4, 19.4.2 13.10.2026 SB2026101301
#VU154172 - Improper Access Control
CVE-2026-9268
CWE-284 Low
No
No
19.2.8, 19.3.4, 19.4.2 13.10.2026 SB2026101301
#VU154170 - Incorrect Authorization
CVE-2026-82632
CWE-863 Low
No
No
19.2.8, 19.3.4, 19.4.2 13.10.2026 SB2026101301
#VU154167 - Incorrect Authorization
CVE-2026-92528
CWE-863 Low
No
No
19.2.8, 19.3.4, 19.4.2 13.10.2026 SB2026101301
#VU154168 - Incorrect Authorization
CVE-2026-78335
CWE-863 Low
No
No
19.2.8, 19.3.4, 19.4.2 13.10.2026 SB2026101301
#VU154169 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-100104
CWE-367 Low
No
No
19.2.8, 19.3.4, 19.4.2 13.10.2026 SB2026101301
#VU154163 - Incorrect Privilege Assignment
CVE-2026-104661
CWE-266 Low
No
No
19.2.8, 19.3.4, 19.4.2 13.10.2026 SB2026101301
#VU154164 - Insufficient Granularity of Access Control
CVE-2026-14210
CWE-1220 Low
No
No
19.2.8, 19.3.4, 19.4.2 13.10.2026 SB2026101301
#VU154165 - Reliance on Untrusted Inputs in a Security Decision
CVE-2026-105458
CWE-807 Low
No
No
19.2.8, 19.3.4, 19.4.2 13.10.2026 SB2026101301
#VU154166 - Incorrect Authorization
CVE-2026-5954
CWE-863 Low
No
No
19.2.8, 19.3.4, 19.4.2 13.10.2026 SB2026101301
#VU154161 - Incorrect Authorization
CVE-2026-14552
CWE-863 Low
No
No
19.2.8, 19.3.4, 19.4.2 13.10.2026 SB2026101301
#VU154162 - Missing Authorization
CVE-2026-6567
CWE-862 Low
No
No
19.2.8, 19.3.4, 19.4.2 13.10.2026 SB2026101301
#VU154157 - Incorrect Authorization
CVE-2026-16275
CWE-863 Medium
No
No
19.2.8, 19.3.4, 19.4.2 13.10.2026 SB2026101301
#VU154158 - Incorrect Authorization
CVE-2026-84284
CWE-863 Medium
No
No
19.2.8, 19.4.2 13.10.2026 SB2026101301
#VU154159 - Incorrect Authorization
CVE-2026-85529
CWE-863 Medium
No
No
19.2.8, 19.3.4, 19.4.2 13.10.2026 SB2026101301
#VU154160 - Use of Incorrectly-Resolved Name or Reference
CVE-2026-100755
CWE-706 Low
No
No
19.2.8, 19.3.4, 19.4.2 13.10.2026 SB2026101301
#VU154156 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-7767
CWE-601 Low
No
No
19.2.8, 19.3.4, 19.4.2 13.10.2026 SB2026101301
#VU154150 - Integer overflow
CVE-2026-97229
CWE-190 High
No
No
19.2.8, 19.3.4, 19.4.2 13.10.2026 SB2026101301
#VU154154 -
CVE-2026-96893
Low
No
No
19.2.8, 19.3.4, 19.4.2 13.10.2026 SB2026101301
#VU154155 - Information Exposure Through Log Files
CVE-2026-101168
CWE-532 Low
No
No
19.2.8, 19.3.4, 19.4.2 13.10.2026 SB2026101301


Showing elements 1 - 20 out of 24