Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Rejected reason: This CVE ID has been rejected. GitLab determined that the reported behavior does not constitute a vulnerability: linking a group SAML identity requires the user to explicitly consent to that group controlling their GitLab account for sign-in, and management of group SAML identities by a group Owner is therefore expected behavior rather than an authorization bypass. No GitLab version was affected.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-06-11 | 3 | Disclosure1Patch2 |
| 2026-06-15 | 1 | Disclosure1 |
| 2026-06-16 | 1 | Patch1 |
| 2026-06-18 | 1 | Disclosure1 |
| 2026-06-26 | 1 | Disclosure1 |
Warning: Multiple high vulnerabilities in #GitLab CC/EE #CVE-2026-6552 #CVE-2026-10087 #CVE-2026-7250 #CVE-2026-8589 CVSS: 8.7-7.3 They can lead to Denial of Service #DoS or remote code execution #RCE #Patch #Patch #Patch
Post summary
The post warns of several high‑severity GitLab CVEs that could lead to DoS or RCE, notes the availability of patches, but provides no exploit, PoC, or evidence of active exploitation.
⚠️ Vulnerabilidades en productos GitLab ❗ CVE-2026-7250 ❗ CVE-2026-6552 ❗ CVE-2026-10087 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-gitlab-13/ https://t.co/3dbWNxoxwn
Post summary
The post announces three GitLab CVEs and provides links for further details, but contains no PoC, exploit, or patch information.
GitLab の複数の脆弱性が FIX：アカウント乗っ取り／データ露出などの恐れ https://iototsecnews.jp/2026/06/11/gitlab-patches-multiple-vulnerabilities-allowing-account-takeover/ GitLab に存在する複数の脆弱性には、Group SAML アイデンティティ管理機能における不適切なアクセス制御の欠陥 (CVE-2026-6552) や、Analytics Dashboard コンポーネントにおける入力データのサニタイズ不足 (CVE-2026-10087) などがあります。これらの不備を突く攻撃者は、特定条件下でのアカウント乗っ取りや、悪意のコード実行などを引き起こす可能性があります。ご利用のチームは、ご注意ください。 #CVE202610087 #CVE20266552 #GitLab #OpenSource #Vulnerability
Post summary
The post announces multiple GitLab vulnerabilities with technical impact details but gives no PoC, exploit, attack evidence, or patch information.
GitLab released versions 19.0.2, 18.11.5 and 18.10.8 for CE/EE to fix four high-severity flaws CVE-2026-6552, -7250, -8589 and -10087 enabling account takeover, denial of service and client-side code execution, according to NVD and GitLab. https://threatcluster.io/cluster/critical-vulnerabilities-discovered-in-gitlab-products-a46e456c
Post summary
GitLab released patches for four high‑severity CVEs that allow account takeover, denial of service, and client‑side code execution, but the post contains no proof of exploitation or PoC details.
CVE-2026-6552 Account Takeover in GitLab EE via Group SAML Identity Management Improper Authorization https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6552
Post summary
A new CVE-2026-6552 was disclosed, describing an account takeover vulnerability in GitLab EE caused by improper authorization in Group SAML Identity Management.
CVE-2026-6552 GitLab has remediated an issue in GitLab EE affecting all versions from 15.5 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions … https://www.cve.org/CVERecord?id=CVE-2026-6552
Post summary
GitLab has released a fix for CVE-2026-6552 that affects specific EE versions, indicating the vulnerability has been remediated.
Discover the latest GitLab security updates in patch release 19.0.2. Protect your self-managed servers from critical vulnerabilities like CVE-2026-6552. https://securityonline.info/gitlab-security-updates-19-0-2/
Post summary
The text promotes the GitLab patch release 19.0.2 to address critical vulnerabilities, notably CVE-2026-6552.