CVE-2026-14814Vulnerability
Reported by 3 independent sources · first reported by CERT-FR · last reported
Last reported 5 days ago
higher than 15% of CVEsFIRST EPSS, as of 24 Oct 2026
What the reports say
4 reports, newest first · the exact sentence from each-
⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More“… CVE-2026-85955, CVE-2026-85956, CVE-2026-9191 (Progress Software MarkLogic Server), CVE-2026-97229, CVE-2026-92883, CVE-2026-16301, CVE-2026-14814 (GitLab), CVE-2026-103521, CVE-2026-103522, CVE-2026-103523, CVE-2026-103524, CVE-2026-103526, CVE-2026-103527, CVE-2026-103528, CVE…”
-
GitLab Patches Max-Severity Vulnerability CVE-2026-97229“CVE-2026-14814 (CVSS score: 8.2) – A pattern-matching flaw that allows an attacker to manipulate cached files, causing target users’ automated pipelines to run malicious code and potentially leak sensitive environment variables.”
-
GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code“CVE-2026-14814 (CVSS score: 8.2) - A permissive regular expression vulnerability that could allow a user to poison cached responses for raw repository files, causing targeted users’ CI/CD pipelines to execute specially crafted content and potentially exposing protected environmen…”
-
Multiples vulnérabilités dans GitLab (12 octobre 2026)“Référence CVE CVE-2026-14814”
Indicators reported together
named in the same reportsCopy this indicator · defanged
Also named with it: CVE-2026-16301, CVE-2026-92883, CVE-2026-97229, CVE-2026-90970, CVE-2026-34073, CVE-2021-36260, CVE-2026-83498, CVE-2026-74580, CVE-2026-85706, CVE-2026-79724, CVE-2026-85025, CVE-2026-81204, CVE-2026-103947, CVE-2026-103946, CVE-2026-106126, CVE-2026-100104, CVE-2026-100755, CVE-2026-101168, CVE-2026-103549
Thanks — we review every report.