CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
GitLab CE/EE Unauthenticated Remote Code Execution (RCE) Advisory (CVE-2026-97229)
[Affected Scope] GitLab CE/EE versions 19.2 (< 19.2.8), 19.3 (< 19.3.5), and 19.4 (< 19.4.2)
[Impact] Unauthenticated attackers can execute arbitrary code on the GitLab server via crafted CI/CD configurations, leading to full system compromise
[Mitigation] Immediate upgrade to patched versions 19.2.8, 19.3.5, or 19.4.2 is mandatory
Eigent CI Workflow Remote Code Execution via pull_request_target Misconfiguration (CVE-2026-22869)
[Affected Scope] The .github/workflows/ci.yml workflow configuration in the Eigent open-source repository
[Impact] Arbitrary code execution from fork pull requests, allowing attackers to steal credentials, push unauthorized code, or create malicious releases
[Mitigation] Apply the official patch commits or update the GitHub Actions workflow configuration to restrict untrusted code execution
JetBrains TeamCity Authentication Bypass and Remote Code Execution (RCE) Vulnerability (CVE-2023-42793) Security Advisory
[Affected Scope] All on-premises versions of JetBrains TeamCity prior to 2023.05.4
[Impact] Unauthenticated attackers can bypass authentication, gain administrative privileges, hijack build pipelines, and execute arbitrary code on the server
[Mitigation] Immediately upgrade TeamCity server to version 2023.05.4 or later, or apply the official security patch plugin