VulnSocial

CVE-2026-2710Patch

LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Back to dashboard
0.5/ 10 priority

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 2 signals
  • Peaked 1d ago at 1 mentions (2026-05-31); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-05-31: 1Mentions · 2026-06-05: 1Patch / Workaround · 2026-05-31: 1Patch / Workaround · 2026-06-05: 1Technical Details · 2026-05-31: 1Technical Details · 2026-06-05: 105-3106-05
Signal classification1 categories
Patch
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • iototsecnews@iototsecnews
    Patch

    GitLab の7 件の脆弱性が FIX：Duo AI ワークフローのアクセス制御不備などに対処 https://iototsecnews.jp/2026/05/29/gitlab-patches-multiple-duo-ai-dos-and-authorisation-vulnerabilities/ 今回のアップデートでは、ユーザーの ID 解決や認可チェックといった、システムの根幹に関わる処理の不備に対応するものです。特に CVE-2026-4868 では、本来制限されるべき他人の ID が使えてしまうなど、アクセス制御の設計上の不備が問題となっています。また、 Wiki において DoS を引き起こす CVE-2026-1402 や、 API の認可不備である CVE-2026-6713／CVE-2026-5296／CVE-2026-2601、認証エンドポイントの CVE-2026-2710、名前解決に関わる CVE-2026-8716 といった複数の脆弱性が修正されています。ご利用のチームは、ご注意ください。 #GitLab #Vulnerability

    Post summary

    GitLab has released a patch update fixing seven CVEs that affect access control, DoS, authorization, authentication, and name‑resolution functions.

    02010153
    492 followersView on X
  • CSIRT TELCONET@CSIRT_Telconet
    Patch

    GitLab publicó las versiones 19.0.1, 18.11.4 y 18.10.7 (CE/EE) que corrigen 7 vulnerabilidades, destacando CVE-2026-4868 (CVSS 8.2) , CVE-2026-2710, y CVE-2026-1402 (CVSS 6.5). Más información: https://csirt.telconet.net/comunicacion/boletines-servicios/actualizaciones-urgentes-de-seguridad-en-gitlab-por-vulnerabilidades-en-duo-ai-dos-y-autorizacion/ https://t.co/ExghQ2wtcq

    Post summary

    El mensaje anuncia versiones de GitLab que corrigen 7 vulnerabilidades, destacando CVE‑2026‑4868, CVE‑2026‑2710 y CVE‑2026‑1402 con sus puntuaciones CVSS, y enlaza a información de actualización.

    00010105
    852 followersView on X

Explore more

Back to dashboard