Multiples vulnérabilités dans GitLab (11 septembre 2026)

unknownknown exploitedpublic exploitCVE-2026-1168 CVE-2026-8030 CVE-2026-13210 CVE-2026-3855 CVE-2026-88765 CVE-2026-7514

Actively exploited. At least one CVE in this advisory is listed in the CISA Known Exploited Vulnerabilities catalog — exploitation has been observed in the wild. Treat remediation as urgent.

De multiples vulnérabilités ont été découvertes dans GitLab. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.

Details

Source: CERT-FR Avis de sécurité (FR · national-cert · site)
Severity: unknown
Published: 2026-09-11
Exploitation: Observed in the wild (CISA KEV)

Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1160/

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Exploitation confirmedCVE-2026-85706Already exploited in the wild (CISA KEV) — the prediction phase is over. Patch now. Riskier than 65% of all EPSS-scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-1168	coverage & exploitation status	NVD · CVE.org
CVE-2026-8030	coverage & exploitation status	NVD · CVE.org
CVE-2026-13210	coverage & exploitation status	NVD · CVE.org
CVE-2026-3855	coverage & exploitation status	NVD · CVE.org
CVE-2026-88765	coverage & exploitation status	NVD · CVE.org
CVE-2026-7514	coverage & exploitation status	NVD · CVE.org
CVE-2025-14871	coverage & exploitation status	NVD · CVE.org
CVE-2026-86341	coverage & exploitation status	NVD · CVE.org
CVE-2026-85706	coverage & exploitation status	NVD · CVE.org
CVE-2024-11222	coverage & exploitation status	NVD · CVE.org
CVE-2026-12910	coverage & exploitation status	NVD · CVE.org
CVE-2026-86340	coverage & exploitation status	NVD · CVE.org
CVE-2026-19619	coverage & exploitation status	NVD · CVE.org
CVE-2026-87719	coverage & exploitation status	NVD · CVE.org
CVE-2026-79708	coverage & exploitation status	NVD · CVE.org
CVE-2026-78252	coverage & exploitation status	NVD · CVE.org
CVE-2026-16794	coverage & exploitation status	NVD · CVE.org
CVE-2026-82837	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

unknownexploitedNCSC-2026-0367 [1.00] [H/H] Kwetsbaarheid verholpen in GitLab Community en Enterprise Editionsncsc-nl
criticalCVE-2026-87719: GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 before 19.1.8, 19…nvd
criticalexploitedCVE-2026-85706: GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.1.8,…nvd
criticalexploitedGitLab security advisory (AV26-917)cccs
highexploitedCISA Adds One Known Exploited Vulnerability to Catalogcisa
highexploited[NEU] [hoch] GitLab: Mehrere Schwachstellencert-bund
criticalexploitedCVE-2026-85706: GitLab Community Edition and Enterprise Edition Path Traversal Vulnerabilitycisa-kev
criticalexploitedGitLab Critical Patch Release: 19.3.2, 19.2.6, 19.1.8gitlab

Multiples vulnérabilités dans GitLab (11 septembre 2026)

Details

Exploitation outlook

Referenced CVEs

Same CVEs, other sources

More from CERT-FR Avis de sécurité