CVE-2026-16494

score

0.2

cvss

7.1

epss

0.4%

published

2026-08-12

kev added

—

first seen

2026-10-21

GitLab EE >= 19.1, < 19.1.4 and >= 19.2, < 19.2.2 contains a broken access control caused by missing authorization checks on a project update endpoint, letting authenticated users modify project settings restricted to higher-privileged roles.