CVE-2026-112326
Low · 3.1CVSS
3.1
EPSS
0.2%
Published
Oct 22, 2026
CISA due date
—
The record
GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an authenticated user with read-only permissions to permanently delete existing vulnerability records due to improper cleanup logic that failed to distinguish between pre-existing records from newly created ones during error handling.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-48524 PyJWT is a JSON Web Token implementation in Python. CWE-460
- CVE-2026-40583 UltraDAG is a minimal DAG-BFT blockchain in Rust. CWE-460
- CVE-2026-33481 Syft is a a CLI tool and Go library for generating a Software Bill of Materials (SBOM)… CWE-460
- CVE-2026-20118 A vulnerability in the handling of an Egress Packet Network Interface (EPNI) Aligner… CWE-460
- CVE-2025-69652 GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT)… CWE-460
- CVE-2025-31650 Apache Tomcat Denial of Service via invalid HTTP priority header CWE-460