[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2026-78335":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":20,"cwes":21,"cpes":23,"technologies":26,"references":28,"score":32,"epss_score":33,"epss_percentile":34,"is_kev":35,"cisa_kev_date_added":36,"cisa_kev_due_date":36,"cisa_ssvc":37,"attack_mappings":47,"exploits":54},402823,"CVE-2026-78335","EUVD-2026-98221","GitLab has remediated an issue in GitLab CE\u002FEE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a project-scoped fine-grained Personal Access Token to modify integrations belonging to a group outside the token's scope, due to incorrect authorization checks.","2026-10-13T02:16:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":18,"attackComplexity":19,"availabilityImpact":18,"privilegesRequired":17,"confidentialityImpact":17},"UNCHANGED","3.1",4.2,"NETWORK","MEDIUM","CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N","LOW","NONE","HIGH",true,[22],"CWE-863",[24,25],"cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*","cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",[27],"Gitlab Gitlab",[29,30,31],"https:\u002F\u002Fdocs.gitlab.com\u002Freleases\u002Fpatches\u002Fpatch-release-gitlab-19-4-2-released\u002F","https:\u002F\u002Fgitlab.com\u002Fgitlab-org\u002Fgitlab\u002F-\u002Fwork_items\u002F621535","https:\u002F\u002Fhackerone.com\u002Freports\u002F3893467",0.56,0.0019,0.08568,false,null,{"timestamp":38,"automatable":39,"tech_impact":40,"exploitation":41,"cisa_decision":42,"cisa_remediation_timeline":46},"2026-10-16T18:05:09.318797Z","no","partial","none",{"vector":43,"decision":44,"priority":45},"CISAv1\u002FE:N\u002FA:N\u002FT:P\u002FM:H\u002F2026-10-25T19:01:50.847158\u002F","track_star","medium","60D",[48],{"name":49,"source":50,"tactics":51,"technique_id":53},"Exploit Public-Facing Application","attack_vector",[52],"initial-access","T1190",[55],{"link":31}]