CVE WATCH / VULNERABILITY DETAIL
CVE-2026-12664
MEDIUMCVSS 6.8NVD feed
Published 22 October 2026 · tracked since 22 October 2026
Description
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an authenticated user with a read_api-scoped token to retrieve a project's incoming email address and create wo
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-114724 HIGH 7.4
- CVE-2026-114715 MEDIUM 6.8
- CVE-2026-114658 HIGH 8.8
- CVE-2026-114636 HIGH 8.7
- CVE-2026-114638 HIGH 8.7
- CVE-2026-114640 HIGH 8.7
- CVE-2026-114577 HIGH 7.3
- CVE-2026-15723 HIGH 8.2
- CVE-2026-110264 CRITICAL 10
- CVE-2026-112212 HIGH 7.5