CVE-2026-7492

score

<0.1

cvss

4.3

epss

0.3%

published

2026-07-08

kev added

—

first seen

2026-10-21

GitLab CE/EE >= 9.1 and < 18.11.7, 19.0 < 19.0.4, and 19.1 < 19.1.2 contain an information disclosure vulnerability caused by improper authorization controls on cross-project reference pages, letting unauthenticated users determine the existence of private projects, exploit requires no authentication.