CVE-2026-6277
CVE-2026-6277: 1 tracked advisory record across GitLab. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
GitLab
1 advisory- Advisory severityMedium4.3
Medium [CVE-2026-6277] GitLab has remediated an issue in GitLab EE affecting all versions from 13.9 before 18.10.8, 18.11 before 18.11.5, and 19.0…
CVE-2026-6277Source published Source updated
GitLab has remediated an issue in GitLab EE affecting all versions from 13.9 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user with Security Manager-role permissions to manage project security configuration even when the relevant feature was in a disabled state, due to incorrect authorization enforcement.
- Related products — impact not confirmed
- GitLab EE
- GitLab
- Source-reported affected versions
- before 18.10.8
- before 18.11.5
- before 19.0.2
- Source-reported fixed versions
- 18.10.8
- 18.11.5
- 19.0.2
- Mitigation guidance
- No mitigation guidance extracted; consult the source.
Android app · Google Play
Monitor future GitLab CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.