CVE-2026-105711

lowpriority · track · 0EPSS 0.002 · 11 %ileFRNL

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.21% (11th) EPSS

CVSS 3.5 · low

Is it mine?

1 products

Check your exposure

Who says so?

2 sources

ncsc_nl · certfr

EPSS · scored 2026-10-24

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when a merge request in a public project referenced a confidential issue from a private project, an authenticated user with no project membership could have read the confidential issue's title, due to a viewer-independent fragment cache key that incorrectly shared per-user-redacted rendered content across all users.

cvss

Technical severity, 0–10. One row per scoring source.

3.5

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.13.5lowCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:Nsecondary · cve@gitlab.comexploitability 2.1 · impact 1.4

v3.13.2lowCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

v3.13.5lowCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:Nsecondary · NCSC-NL NL

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-524USprimaryCWE-524US

affected products (1)

Products and version ranges known to be affected.

GitLab GitLab≤ vers:unknown/*ncsc_nlNL

advisories (2)

Vendor and ecosystem advisories describing this.

NCSC-2026-0447Kwetsbaarheden verholpen in GitLab door GitLab Inc.NL2026-10-22csaf · ncsc_nlNL
GitLab heeft 12 kwetsbaarheden verholpen in GitLab Community Edition (CE) en Enterprise Edition (EE). Eén kwetsbaarheid is als kritiek aangemerkt. GitLab heeft een kwetsbaarheid verholpen in GitLab Community Edition en Enterprise Edition binnen de versies vanaf 7.0 tot bepaalde 19.x releases.
CERTFR-2026-AVI-1363Multiples vulnérabilités dans GitLabFrançais2026-10-22vendor · certfrFR

sources

Which sources assert this record, and when.

ncsc_nl certfr NVD CVE.org MITRE

published 2026-10-22modified 2026-10-22

related (95)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2022-41032US	high7.8	1.29% (70th)	Exploit	2022-10-11
NuGet Client Elevation of Privilege Vulnerability
CVE-2021-24027US	high7.5	3.81% (90th)	Exploit	2021-04-06
A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may have allowed a third party with access to the device’s externa…
CVE-2026-59903US	high7.5	0.25% (15th)	Exploit	2026-08-17
Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, io.netty.handler.codec.http.cors.CorsHandler setVaryHeader replaces a…
CVE-2025-14177US	high7.5	0.51% (43rd)	Exploit	2025-12-27
In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1, the getimagesize() function may leak uninitialized heap memo…
CVE-2026-109829US	critical9.1	0.15% (4th)	—	2026-10-15
undici is an HTTP client library for Node.js. In versions 7.0.0 through 7.30.0 and 8.0.0 through 8.12.1, when an originless Agent composes the redirect and cache interceptors in th…

+90 more

references (3) nvd

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan