CVE-2026-87719Vulnerability

Reported by 2 independent sources · first reported 14 Sep 2026 by Rapid7 · last reported 30 Sep 2026

Last reported 25 days ago

EPSS0.6%
higher than 46% of CVEsFIRST EPSS, as of 23 Oct 2026

What the reports say

2 reports, newest first · the exact sentence from each

“Référence CVE CVE-2026-87719”

CERT-FRGovernment30 Sep 2026
Multiples vulnérabilités dans GitLab (30 septembre 2026)
“These include CVE-2026-87719, a critical insecure deserialization vulnerability (CWE-502) in GitLab EE with a CVSSv3.1 score of 9.9.”

Rapid7Vendor14 Sep 2026
CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild

named in the same reports

Copy this indicator · defanged

1 indicator, defanged, one per line

hxxps://docs.gitlab[.]com/releases/patches/patch-release-gitlab-19-0-9-released/

Also named with it: CVE-2026-85706

Thanks — we review every report.

Report a wrong value