CVE-2026-16301Vulnerability
Reported by 3 independent sources · first reported by CERT-FR · last reported
Last reported 5 days ago
higher than 11% of CVEsFIRST EPSS, as of 24 Oct 2026
What the reports say
4 reports, newest first · the exact sentence from each-
⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More“… CVE-2026-85948, CVE-2026-85955, CVE-2026-85956, CVE-2026-9191 (Progress Software MarkLogic Server), CVE-2026-97229, CVE-2026-92883, CVE-2026-16301, CVE-2026-14814 (GitLab), CVE-2026-103521, CVE-2026-103522, CVE-2026-103523, CVE-2026-103524, CVE-2026-103526, CVE-2026-103527, CVE-…”
-
GitLab Patches Max-Severity Vulnerability CVE-2026-97229“CVE-2026-16301 (CVSS score: 8.5) – An authorization flaw that lets a user with a Developer role bypass security permissions and run automated testing/deployment (CI/CD) pipelines on protected code branches.”
-
GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code“CVE-2026-16301 (CVSS score: 8.5) - An improper authorization vulnerability in the downstream pipeline creation service that could allow an authenticated user with Developer role to execute CI/CD pipelines on protected branches.”
-
Multiples vulnérabilités dans GitLab (12 octobre 2026)“Référence CVE CVE-2026-16301”
Indicators reported together
named in the same reportsCopy this indicator · defanged
Also named with it: CVE-2026-14814, CVE-2026-92883, CVE-2026-97229, CVE-2026-90970, CVE-2026-34073, CVE-2021-36260, CVE-2026-83498, CVE-2026-74580, CVE-2026-85706, CVE-2026-79724, CVE-2026-85025, CVE-2026-81204, CVE-2026-103947, CVE-2026-103946, CVE-2026-106126, CVE-2026-100104, CVE-2026-100755, CVE-2026-101168, CVE-2026-103549
Thanks — we review every report.