Skip to content
Exploit Radar Choose my productsProducts My radar

Products › Brands

Brand

GitLab: actively exploited vulnerabilities

5 vulnerabilities in GitLab products (Community / Enterprise Edition (CE/EE)) are in CISA’s catalog of exploited vulnerabilities, 1 of them added in the last 90 days. Last added: September 11, 2026.

GitLab security advisories

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

By category

Add just one GitLab category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

  • Community / Enterprise Edition (CE/EE)5 vulnerabilities, Development and CI/CD

Name used by CISA: GitLab. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this GitLab list.

  1. Rank 1

    GitLab Community / Enterprise Edition (CE/EE)CVE-2026-85706

    GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 10.0critical

    Added Sep 11, 2026

  2. Rank 2

    GitLab Community / Enterprise Edition (CE/EE)CVE-2021-22175

    GitLab Server-Side Request Forgery (SSRF) Vulnerability

    CVE from 2021, added in 2026

    CVSS severity 9.8critical

    Added Feb 18, 2026

  3. Rank 3

    GitLab Community / Enterprise Edition (CE/EE)CVE-2021-39935

    GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability

    CVE from 2021, added in 2026

    CVSS severity 7.5high

    Added Feb 3, 2026

  4. Rank 4

    GitLab Community / Enterprise Edition (CE/EE)CVE-2021-22205

    GitLab Community and Enterprise Editions Remote Code Execution Vulnerability

    Ransomware

    CVSS severity 10.0critical

    Added Nov 3, 2021

  5. Rank 5

    GitLab Community / Enterprise Edition (CE/EE)CVE-2023-7028

    GitLab Community and Enterprise Editions Improper Access Control Vulnerability

    CVSS severity 9.8critical

    Added May 1, 2024

Follow and verify

Get new GitLab vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).

Indicative classification, based on the vendor and product names given by CISA. How products are classified.