Open Source Open Source GitLab <19.4.2

Name: Open Source Open Source GitLab <19.4.2
Brand: Open Source

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

unpatched

critical

by severity

0critical0high1medium0low

updated 2026-10-27

vulnerabilities (24)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-97229US	—	18.4% (97th)	Exploit	19.4.2	2026-10-13	< 19.4.2
CVE-2026-96893US	—	0.58% (48th)	—	19.4.2	2026-10-13	< 19.4.2
CVE-2026-92883US	—	0.48% (41st)	—	19.4.2	2026-10-13	< 19.4.2
CVE-2026-14814US	—	0.39% (33rd)	—	19.4.2	2026-10-13	< 19.4.2
CVE-2026-16301US	—OT elevated	0.34% (27th)	—	19.4.2	2026-10-13	< 19.4.2
CVE-2026-7767US	—	0.29% (22nd)	—	19.4.2	2026-10-13	< 19.4.2
CVE-2026-81839US	—OT elevated	0.28% (20th)	—	19.4.2	2026-10-13	< 19.4.2
CVE-2026-16275US	—OT elevated	0.26% (18th)	—	19.4.2	2026-10-13	< 19.4.2
CVE-2026-103549US	—OT elevated	0.23% (14th)	—	19.4.2	2026-10-13	< 19.4.2
CVE-2026-85529US	—OT elevated	0.22% (13th)	—	19.4.2	2026-10-13	< 19.4.2
CVE-2026-84284US	—OT elevated	0.22% (13th)	—	19.4.2	2026-10-13	< 19.4.2
CVE-2026-14210US	—	0.22% (12th)	—	19.4.2	2026-10-13	< 19.4.2
CVE-2026-6567US	—OT elevated	0.22% (12th)	—	19.4.2	2026-10-13	< 19.4.2
CVE-2026-14552US	—OT elevated	0.22% (12th)	—	19.4.2	2026-10-13	< 19.4.2
CVE-2026-82632US	—OT elevated	0.21% (12th)	—	19.4.2	2026-10-13	< 19.4.2
CVE-2026-100104US	—	0.20% (9th)	—	19.4.2	2026-10-13	< 19.4.2
CVE-2026-105458US	—	0.19% (9th)	—	19.4.2	2026-10-13	< 19.4.2
CVE-2026-78335US	—OT elevated	0.19% (9th)	—	19.4.2	2026-10-13	< 19.4.2
CVE-2026-5954US	—OT elevated	0.19% (9th)	—	19.4.2	2026-10-13	< 19.4.2
CVE-2026-9268US	medium4.3OT elevated	0.18% (8th)	—	19.4.2	2026-10-13	< 19.4.2
CVE-2026-104661US	—	0.18% (8th)	—	19.4.2	2026-10-13	< 19.4.2
CVE-2026-101168US	—	0.16% (5th)	—	19.4.2	2026-10-13	< 19.4.2
CVE-2026-92528US	—OT elevated	0.13% (3rd)	—	19.4.2	2026-10-13	< 19.4.2
CVE-2026-100755US	—	0.09% (0th)	—	19.4.2	2026-10-13	< 19.4.2

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-863Incorrect Authorization13 CVEs
CWE-1220Insufficient Granularity of Access Control1 CVEs
CWE-1427Improper Neutralization of Input Used for LLM Prompting1 CVEs
CWE-190Integer Overflow or Wraparound1 CVEs
CWE-266Incorrect Privilege Assignment1 CVEs
CWE-349Acceptance of Extraneous Untrusted Data With Trusted Data1 CVEs
CWE-532Insertion of Sensitive Information into Log File1 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')1 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)24 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan