CVE-2026-88765

score

0.4

cvss

8.5

epss

0.7%

published

2026-09-15

kev added

—

first seen

2026-10-21

GitLab EE 12.3 to 19.1.8, 19.2 < 19.2.6, and 19.3 < 19.3.2 contain a remote code execution caused by Unicode conversion buffer overflow in Advanced Search indexing when importing crafted Git project exports, letting authenticated users execute code remotely, exploit requires user authentication.