Skip to content
OpenAdvisories
Critical WID-SEC-2026-2882 2 CVEs

GitLab: Mehrere Schwachstellen ermöglichen Manipulation von Dateien

Published Aug 17, 2026 · Updated Aug 19, 2026 · Revision 2 · de-DE

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Dateien zu manipulieren.

Product

GitLab ist eine Webanwendung zur Versionsverwaltung für Softwareprojekte auf Basis von git.

Vulnerabilities 2

  • Critical 9.4
    CVE-2026-19478 Public exploit Scanner template

    Improper Control of Generation of Code ('Code Injection') in GitLab

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain conditions could allow an unauthenticated user to remotely modify or delete publ…

    GitLab GitLab Web / CMS
  • High 7.1
    CVE-2026-19650 Public exploit

    Cross-Site Request Forgery (CSRF) in GitLab

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain conditions could have allowed an unauthenticated user to execute mutations via G…

    GitLab GitLab Web / CMS

Revision history

  1. #2

    CVE-2026-19478 wird ausgenutzt

  2. #1

    Initiale Fassung

References