VulnSocial

CVE-2026-2619Patch(gitlab / gitlab)

LOWCVSS 4.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch gitlab gitlab systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

GitLab has remediated an issue in GitLab EE affecting all versions from 18.6 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that under certain circumstances could have allowed an authenticated user with auditor privileges to modify vulnerability flag data in private projects due to incorrect authorization.

gitlab CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-863

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • gitlab

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-04-08); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
gitlab
Products
gitlab

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-04-08: 2Mentions · 2026-07-02: 1Patch / Workaround · 2026-04-08: 204-0807-02
Signal classification2 categories
Patch
266.7%
Disclosure
133.3%
Referenced assets2 URLs
By indicator
Classification over time
DateTotalLabels
2026-04-082
Patch2
2026-07-021
Disclosure1
Full discourse3 posts
  • Sirshak@sirshakmedia
    Disclosure

    Nepali cybersecurity researcher and tech entrepreneur Kabish Dahal (sage_cyberlord) has discovered and responsibly disclosed the GitLab Enterprise Edition vulnerability, officially published as CVE-2026-2619. #CyberSecurity #GitLab #CVE20262619 #Sirshak https://t.co/hYfEekcUxy

    Post summary

    A tweet announces that researcher Kabish Dahal discovered and responsibly disclosed the GitLab Enterprise Edition vulnerability CVE‑2026‑2619, with no PoC, exploit, or patch details provided.

    00010103
    4 followersView on X
  • CVE@CVEnew
    Patch

    CVE-2026-2619 GitLab has remediated an issue in GitLab EE affecting all versions from 18.6 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that under certain circumstance… https://www.cve.org/CVERecord?id=CVE-2026-2619

    Post summary

    GitLab announced a remediation for CVE-2026-2619 in specified EE versions, with no exploit details or PoC shared.

    00010263
    57.0K followersView on X
  • Infoflowcloud@infoflowcloud
    Patch

    🚨*CVE* CVE-2026-2619 GitLab has remediated an issue in GitLab EE affecting all versions from 18.6 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that under certain circumstance… https://www.cve.org/CVERecord?id=CVE-2026-2619 ----- Traducción: CVE-2026-2619 Git… http://infoflow.cloud`

    Post summary

    GitLab has issued a remediation for CVE‑2026‑2619 affecting specific EE versions, with no evidence of active exploitation or proof of concept available.

    0000032
    67 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appgitlabgitlab---

Explore more

Back to dashboardgitlab CVEsgitlab vulnerabilities