CVE-2026-89078Vulnerability
Reported by 3 independent sources · first reported by CERT-FR · last reported
Last reported 3 days ago
higher than 37% of CVEsFIRST EPSS, as of 24 Oct 2026
What the reports say
6 reports, newest first · the exact sentence from each-
Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases“On September 23, it fixed two more, CVE-2026-93577 and CVE-2026-89078, both rated 9.9 but requiring a logged-in account.”
-
⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests“…-93485 aka Comment2Shell (WordPress), CVE-2026-76708, CVE-2026-76709, CVE-2026-76710 (HPE Networking Analytics and Location Engine), CVE-2026-89078, CVE-2026-93577 (GitLab), CVE-2026-96512 (Sudo), CVE-2026-87022, CVE-2026-86350, CVE-2026-78437, CVE-2026-78383, CVE-2026-77791, CVE…”
-
Bulletin d'actualité CERTFR-2026-ACT-042 (05 octobre 2026)“CVE-2026-89078”
-
Bulletin d'actualité CERTFR-2026-ACT-041 (28 septembre 2026)“CVE-2026-89078”
-
Múltiples vulnerabilidades en GitLab“CVE-2026-89078: vulnerabilidad de liberación doble de memoria en el analizador de expresiones regulares.”
-
Multiples vulnérabilités dans GitLab (24 septembre 2026)“Référence CVE CVE-2026-89078”
Indicators reported together
named in the same reportsCopy this indicator · defanged
Also named with it: CVE-2026-93577, CVE-2026-76183, CVE-2026-86248, CVE-2026-86350, CVE-2026-76708, CVE-2026-76709, CVE-2026-10518, CVE-2026-4523, CVE-2026-84739, CVE-2026-8937, CVE-2026-92470, CVE-2026-92529, CVE-2026-92530, CVE-2026-92628, CVE-2026-92874, CVE-2026-88771, CVE-2026-102331, CVE-2026-76504, CVE-2026-102489
Thanks — we review every report.