onyx --cves cve-2026-101168
CVE-2026-101168
- score
- 0.5
- cvss
- 6.2
- epss
- 0.2%
- published
- 2026-10-13
- kev added
- —
- first seen
GitLab CE/EE >= 12.0 and < 19.2.8, 19.3 < 19.3.5, and 19.4 < 19.4.2 contain an information disclosure vulnerability caused by insertion of sensitive request data into log files and error tracking events, letting authenticated users with access to GitLab Pages log data obtain access tokens and secrets, exploit requires authenticated user access to GitLab Pages log data.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- First advisory — GitLab security releases GitLab Critical Patch Release: 19.4.2, 19.3.5, 19.2.8
- Published
- Tracked by Onyx
Advisories
0 feeds this week