CVE-2026-88765

GitLab has remediated an issue in GitLab EE affecting all versions from 12.3 to 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 under certain conditions could allow an authenticated user to achieve remote code execution by importing a specially crafted Git project export to overflow the Unicode conversion buffer used in Advanced Search indexing.

• CWE-77
• CWE-787

• https://gitlab.com/gitlab-org/gitlab/-/work_items/627435Broken Link
• https://hackerone.com/reports/3990469Permissions Required

Published

Sep 15, 2026

Last Modified

Sep 28, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-88755Z.ai ZCode v3.11.2.6792 was discovered to automatically esta…7.8
• CVE-2026-88756Pagekit CMS <= 1.0.18 allows an unauthenticated attacker to …5.3
• CVE-2026-8876Version 3.0.7 of the Securly Chrome Extension contains hardc…7.3
• CVE-2026-88761The Botslab G980H dash camera firmware generates the default…5.3
• CVE-2026-88763A flaw was found in the skupper-router component of Red Hat …5.9
• CVE-2026-88764The Simple Membership WordPress plugin before 4.7.8 does not…5.4
• CVE-2026-8877The Responsive Video Embedder plugin for WordPress is vulner…6.4
• CVE-2026-88770A flaw was found in the Device Authorization Grant flow of K…6.5
• CVE-2026-88771Improper input validation vulnerability in Citrix NetScaler …9.8
• CVE-2026-88772Vulnerability in Citrix NetScaler ADC and Citrix NetScaler G…8.1
• CVE-2026-88773Inconsistent interpretation of HTTP requests ('HTTP Request/…10
• CVE-2026-88774Vulnerability in Citrix NetScaler ADC and Citrix NetScaler G…7.2