CVE WATCH / VULNERABILITY DETAIL
CVE-2026-15723
HIGHCVSS 8.2NVD feed
Published 22 October 2026 · tracked since 22 October 2026
Description
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when OmniAuth SAML and LDAP auto-linking were both enabled, an authenticated user could have taken over an existing LDAP-backed account without any interact
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-114724 HIGH 7.4
- CVE-2026-114715 MEDIUM 6.8
- CVE-2026-114658 HIGH 8.8
- CVE-2026-114636 HIGH 8.7
- CVE-2026-114638 HIGH 8.7
- CVE-2026-114640 HIGH 8.7
- CVE-2026-114577 HIGH 7.3
- CVE-2026-12664 MEDIUM 6.8
- CVE-2026-110264 CRITICAL 10
- CVE-2026-112212 HIGH 7.5