Skip to content

CVE-2026-87719

Named by 2 kept items in this workspace.

Search every workspace for CVE-2026-87719. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • Breaking: GitLab Critical Path Traversal Flaw Exploited in the Wild — Patch Immediately
    advisory2026-09-14

    Critical insecure deserialization bug in the GraphQL subscription serializer, exploitable by an authenticated user with Duo Chat access to bypass serialization controls and retrieve Advanced Search instance configurations including stored Elasticsearch and OpenSearch passwords. Affects GitLab EE onl

  • CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild
    advisory2026-09-14

    Critical insecure deserialization vulnerability (CWE-502) in GitLab EE. CVSSv3.1 score 9.9. Under certain conditions, an authenticated user with Duo Chat access could obtain Advanced Search instance configurations and sensitive credentials using a specially crafted GraphQL subscription argument. Not

All cves in this workspace.