GitLab known exploited vulnerabilities
CISA's Known Exploited Vulnerabilities catalog lists 5 GitLab vulnerabilities: 3 added in the last 365 days, 3 rated critical (CVSS 9 or higher), and 1 with known ransomware use. The most recent was added Sep 11, 2026.
RSS feed for GitLab exploited vulnerabilities · Search them on KEVWire · Ask your AI assistant
| Added to KEV | CVE | Vulnerability | CVSS | EPSS | Federal due date | Ransomware use |
|---|---|---|---|---|---|---|
| 2026-09-11 | CVE-2026-85706 | GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability | 10 (v3.1) | 97.4% | 2026-09-14 | Unknown |
| 2026-02-18 | CVE-2021-22175 | GitLab Server-Side Request Forgery (SSRF) Vulnerability | 6.8 (v3.1) | 53.4% | 2026-03-11 | Unknown |
| 2026-02-03 | CVE-2021-39935 | GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability | 6.8 (v3.1) | 36.1% | 2026-02-24 | Unknown |
| 2024-05-01 | CVE-2023-7028 | GitLab Community and Enterprise Editions Improper Access Control Vulnerability | 10 (v3.1) | 94.5% | 2024-05-22 | Unknown |
| 2021-11-03 | CVE-2021-22205 | GitLab Community and Enterprise Editions Remote Code Execution Vulnerability | 10 (v3.1) | 99.7% | 2021-11-17 | Known |