Critical Alert 1 Active Exploit Detected Today

CVE-2026-60004 Gitea Code Injection Vulnerability →
Powered by CVE Watchtower
×
August 26, 2026

CVE Watchtower


← Back to CVE List

CVE-2026-77801NVD

Vulnerability Summary

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.8 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, could have allowed an authenticated user to cause a denial of service affecting background job processing, due to missing object count limits.
Severity Level
MEDIUM(6.5)
Published Date
Aug 26, 2026
Last Modified
Aug 26, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
Refer to the official MITRE database for detailed architectural specifications regarding this weakness.
CVSS v3.1 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredLow
User InteractionNone
ScopeUnchanged
ConfidentialityNone
IntegrityNone
AvailabilityHigh