Critical 1 vendor · 1 advisory

CVE-2026-5652

Unified cross-vendor view: this CVE is referenced by 1 tracked vendor. Each vendor rates and fixes it independently — confirm the impact for your specific products below.

NVD detail CVE.org

GitLab1 advisory

Critical9.0GitLab: insecure direct object reference vulnerability in the Users API component of Crafty Controller allows a remote, authenticate…Apr 21, 2026

CVE-2026-5652 — critical severity, 1 vendor affected · VulniPulse