PT-2026-7524 · Gitlab · Gitlab Ce/Ee

Joaxcar · Publicado 2026-02-11 · Atualizado 2026-02-16 · CVE-2026-0595

Positive Technologies (AI Summary)

CVSS v3.1

7.3

Alta

Vetor base

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 13.9 through 18.6.6 GitLab CE/EE versions 18.7 through 18.7.4 GitLab CE/EE versions 18.8 through 18.8.4

Description An issue exists in GitLab CE/EE where an authenticated user could potentially add unauthorized email addresses to victim accounts. This is possible due to HTML injection within test case titles under specific conditions.

Recommendations Update GitLab CE/EE to a version after 18.6.6. Update GitLab CE/EE to a version after 18.7.4. Update GitLab CE/EE to a version after 18.8.4.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

BIT-GITLAB-2026-0595

CVE-2026-0595

Produtos afetados

Gitlab Ce/Ee

Referências · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/0xxx/CVE-2026-0595.json · Exploit
• 🔥 https://hackerone.com/reports/3486862 · Exploit
• https://about.gitlab.com/releases/2026/02/10/patch-release-gitlab-18-8-4-released · Aviso do Fabricante
• https://gitlab.com/gitlab-org/gitlab/-/issues/584975 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-0595 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/2021590564924199336 · Publicação no Twitter
• https://twitter.com/cracbot/status/2023351732047356210 · Publicação no Twitter
• https://cve.org/CVERecord?id=CVE-2026-0595 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-0595 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-0595 · Nota de Segurança
• https://twitter.com/CCBalert/status/2022242799131746743 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2021554575438688501 · Publicação no Twitter
• https://t.me/cveNotify/151889 · Publicação no Telegram
• https://ubuntu.com/security/CVE-2026-0595 · Aviso do Fabricante
• https://osv.dev/vulnerability/BIT-gitlab-2026-0595 · Aviso do Fabricante