CVE-2026-0723
- Source
- https://cve.org/CVERecord?id=CVE-2026-0723
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-0723.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-0723
- Aliases
- Downstream
CGA (24)
- CGA-246r-3w3g-9h9j
- CGA-2mwc-fc9h-29c6
- CGA-2r73-hfvp-5w56
- CGA-4926-pcp6-jwm4
- CGA-4cp4-ww6h-jg9c
- CGA-6w5p-58v2-vvqg
- CGA-77gg-pjjm-645c
- CGA-7wj5-9249-pp27
- CGA-82x8-g3ch-j2pp
- CGA-9xf5-p3cx-c59g
- CGA-gxwh-9xqh-x4v4
- CGA-hjf2-j9fj-qgm7
- CGA-hq64-4w8j-w6f8
- CGA-hwwh-qw4w-5c7w
- CGA-m7g5-3q68-rf56
- CGA-mp5c-6hxm-6w4g
- CGA-p43j-rv43-2wq7
- CGA-pwjx-fm6w-272h
- CGA-q65v-v9x8-qf8p
- CGA-rvjf-mv4m-xc95
- CGA-w6pr-85pp-gqjv
- CGA-wff3-x44r-r7qj
- CGA-wgqm-m95m-3q29
- CGA-xj8m-cpc6-vcjc
MINI (12)
UBUNTU (1)
- Published
- 2026-01-22T13:34:08Z
- Modified
- 2026-10-30T10:47:16Z
- Severity
-
- 7.4 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
- Summary
- Unchecked Return Value in GitLab
- Details
-
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that could have allowed an individual with existing knowledge of a victim's credential ID to bypass two-factor authentication by submitting forged device responses.
- Database specific
{ "cna_assigner": "GitLab", "cwe_ids": [ "CWE-252" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/0xxx/CVE-2026-0723.json" }- References
-
- https://about.gitlab.com/releases/2026/01/21/patch-release-gitlab-18-8-2-released/
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/0xxx/CVE-2026-0723.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-0723
- https://gitlab.com/gitlab-org/gitlab/-/issues/585333
- https://hackerone.com/reports/3476052
- git://git@gitlab.com:gitlab-org/gitlab.git
Affected packages
Git / gitlab.com/gitlab-org/gitlab
Affected ranges
- Type
- GIT
- Repo
- https://gitlab.com/gitlab-org/gitlab
- Events
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "range": [ { "introduced": "18.6.0" }, { "fixed": "18.6.4" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "range": [ { "introduced": "18.6.0" }, { "fixed": "18.6.4" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "range": [ { "introduced": "18.7.0" }, { "fixed": "18.7.2" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "range": [ { "introduced": "18.7.0" }, { "fixed": "18.7.2" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "range": [ { "introduced": "18.8.0" }, { "fixed": "18.8.2" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "range": [ { "introduced": "18.8.0" }, { "fixed": "18.8.2" } ], "source": "CPE_RANGE" } ] }