PT-2026-7526 · Gitlab · Gitlab Ce/Ee

Go7F0 · Publicado 2026-02-11 · Atualizado 2026-02-12 · CVE-2026-1080

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions GitLab EE versions 16.7 through 18.6.5 GitLab EE versions 18.7 through 18.7.3 GitLab EE versions 18.8 through 18.8.3

Description An authenticated user could potentially access iteration data from private descendant groups. This access was possible by querying the iterations API endpoint under specific conditions.

Recommendations Update GitLab EE to version 18.6.6 or later. Update GitLab EE to version 18.7.4 or later. Update GitLab EE to version 18.8.4 or later.

Exploit

Correção

IDOR

Enumeração de Fraquezas

CWE-639

Identificadores relacionados

CVE-2026-1080

Produtos afetados

Gitlab Ce/Ee

Referências · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/1xxx/CVE-2026-1080.json · Exploit
• 🔥 https://hackerone.com/reports/3484568 · Exploit
• https://osv.dev/vulnerability/CVE-2026-1080 · Aviso do Fabricante
• https://gitlab.com/gitlab-org/gitlab/-/issues/586477 · Nota
• https://about.gitlab.com/releases/2026/02/10/patch-release-gitlab-18-8-4-released · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2026-1080 · Nota de Segurança
• https://twitter.com/CVEnew/status/2021554577670037641 · Publicação no Twitter
• https://ubuntu.com/security/CVE-2026-1080 · Aviso do Fabricante
• https://t.me/cveNotify/151893 · Publicação no Telegram
• https://t.me/cveNotify/151890 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-1080 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-1080 · Aviso do Fabricante