VDB
CVE-2026-18244
CVE-2026-18244
PUBLISHED
CVSS 4.3 MEDIUM
Reported by GitLab · Published August 12, 2026
GitLab has remediated an issue in GitLab EE affecting all versions from 17.7 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to view restricted configuration settings due to improper authorization checks on a group settings page.
Risk Scores
CVSS 3.1
4.3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| GitLab | GitLab | 17.7, 19.1, 19.2 |
| GitLab | GitLab | 17.7, 19.1, 19.2 |
Timeline
- Aug 12, 2026 Coalition ESS Score
- Aug 12, 2026 CVE Published
- Aug 13, 2026 CVE Updated
- Aug 20, 2026 Security Advisory
- Aug 24, 2026 EPSS Score