G
Vendor security profile5 actively exploited CVEs
gitlab
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs141
Critical10
CISA KEV5
Public exploit18
Patch rate%1
Avg. CVSS5.8
12-month vulnerability rate
0
1
3
1
1
11
0
0
20
25
28
26
CVE KEV
CVE severity distribution
141toplam CVE
Critical10 (7%)
High33 (23%)
Medium79 (56%)
Low18 (13%)
Uncertain1 (1%)
Patch and exploitation view
%1
Verified patch
%4
CISA KEV
%13
Public exploit
2Patch available
0Partial
5Workaround
0Vendor: no patch
134Unknown
Latest vulnerabilities
4.2
CVE-2026-5954
Incorrect Authorization in GitLab
G
Patch status unknownEPSS %0
4.3
CVE-2026-6567
Incorrect Authorization in GitLab
G
Patch status unknownEPSS %0
5.8
CVE-2026-7767
URL Redirection to Untrusted Site ('Open Redirect') in GitLab
G
Patch status unknownEPSS %0
2.7
CVE-2026-9268
Incorrect Authorization in GitLab
G
Patch status unknownEPSS %0
4.3
CVE-2026-14210
Insufficient Granularity of Access Control in GitLab
G
Patch status unknownEPSS %0
4.3
CVE-2026-14552
Incorrect Authorization in GitLab
G
Patch status unknownEPSS %0
8.2
CVE-2026-14814
Permissive Regular Expression in GitLab
G
Patch status unknownEPSS %0
5.3
CVE-2026-16275
Incorrect Authorization in GitLab
G
Patch status unknownEPSS %0
8.5
CVE-2026-16301
Incorrect Authorization in GitLab
G
Patch status unknownEPSS %0
4.2
CVE-2026-78335
Incorrect Authorization in GitLab
G
Patch status unknownEPSS %0