{"metadata": {"vulnerability": "CVE-2026-15723", "count": 21, "kinds": {"milestone": 7, "sighting": 4, "kev": 0, "other": 10}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0447", "record": "NCSC-2026-0447", "field": "document.tracking.generator.date"}, {"timestamp": "2026-07-14T13:04:45.612Z", "date_only": false, "value": "2026-07-14T13:04:45.612Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-15723", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-21T00:00:00Z", "date_only": true, "value": "2026-10-21", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1363", "record": "CERTFR-2026-AVI-1363", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-21T18:00:00Z", "date_only": false, "value": "2026-10-21T18:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20261022", "record": "CVE-2026-15723", "field": "creation_timestamp", "uuid": "dd0fb409-17db-4c85-a564-aa91bec17b73", "url": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20261022"}, {"timestamp": "2026-10-21T23:35:15.434Z", "date_only": false, "value": "2026-10-21T23:35:15.434Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-15723", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-21T23:35:15.434Z", "date_only": false, "value": "2026-10-21T23:35:15.434Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-15723", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-21T23:35:15.434Z", "date_only": false, "value": "2026-10-21T23:35:15.434Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitLab", "record": "CVE-2026-15723", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-21T23:52:09.607Z", "date_only": false, "value": "2026-10-21T23:52:09.607759Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117481585299685656", "record": "CVE-2026-15723", "field": "creation_timestamp", "uuid": "a6c8b0a8-fa26-4a99-9684-66fdacd02cfb", "content": "CVE-2026-15723 Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when OmniAuth SAML and LDAP auto-linking were both enabled, an authenticated user could have taken over an existing LDAP-backed account without any interaction from the targeted user, due to improper input sanitization in the LDAP email lookup path used during OmniAuth identity linking.\nhttps://www.cve.org/CVERecord?id=CVE-2026-15723https://gitlab.com/gitlab-org/gitlab/-/work_items/605977https://hackerone.com/reports/3852192https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/#gitlab #GitLab#CVE_2026_15723#bot", "url": "https://infosec.exchange/users/cve/statuses/117481585299685656"}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": false, "value": "2026-10-22T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1363", "record": "CERTFR-2026-AVI-1363", "field": "last_revision_date"}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": false, "value": "2026-10-22T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1363", "record": "CERTFR-2026-AVI-1363", "field": "initial_release_date"}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": false, "value": "2026-10-22T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1363", "record": "CERTFR-2026-AVI-1363", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-22T01:16:59Z", "date_only": false, "value": "2026-10-22T01:16:59Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-92F3-3RM4-RCGV", "record": "GHSA-92F3-3RM4-RCGV", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-22T01:16:59.477Z", "date_only": false, "value": "2026-10-22T01:16:59.477", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-15723", "record": "FKIE_CVE-2026-15723", "field": "published"}, {"timestamp": "2026-10-22T02:12:12Z", "date_only": false, "value": "2026-10-22T02:12:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0447", "record": "CVE-2026-15723", "field": "creation_timestamp", "uuid": "67ec7975-8abb-4965-bd33-0cdc302daab9", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0447"}, {"timestamp": "2026-10-22T03:33:33Z", "date_only": false, "value": "2026-10-22T03:33:33Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-92F3-3RM4-RCGV", "record": "GHSA-92F3-3RM4-RCGV", "field": "published"}, {"timestamp": "2026-10-22T03:33:34Z", "date_only": false, "value": "2026-10-22T03:33:34Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-92F3-3RM4-RCGV", "record": "GHSA-92F3-3RM4-RCGV", "field": "modified"}, {"timestamp": "2026-10-22T07:12:12Z", "date_only": false, "value": "2026-10-22T07:12:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0447", "record": "CVE-2026-15723", "field": "creation_timestamp", "uuid": "390e2176-85ac-4161-9ccc-7b3d81150d07", "content": "GitLab heeft 12 kwetsbaarheden verholpen in GitLab Community Edition (CE) en Enterprise Edition (EE). E\u00e9n kwetsbaarheid is als kritiek aangemerkt.\n\n\nGitLab heeft een kwetsbaarheid verholpen in GitLab Community Edition en Enterprise Edition binnen de versies vanaf 7.0 tot bepaalde 19.x releases. De kwetsbaarheid met kenmerk CVE-2026-110264 heeft een CVSS-score van 10,0 en betreft een integer overflow bij het compileren van een speciaal vervaardigde reguliere expressie. Onder bepaalde omstandigheden kan een niet-geauthenticeerde kwaadwillende de kwetsbaarheid op afstand misbruiken  om willekeurige code op de GitLab-serveruit te voeren. De kwetsbaarheid treft GitLab-versies vanaf 7.0.\n\nDe kwetsbaarheden met kenmerk CVE-2026-15723 en CVE-2026-112212 zijn als High aangemerkt. CVE-2026-15723 kan door een geauthenticeerd aanvaller bij specifieke SAML- en LDAP-configuraties leiden tot overname van een bestaand account. CVE-2026-112212 betreft cache poisoning in OAuth/OIDC-discovery-endpoints en kan bepaalde authenticatiestromen omleiden naar een door een kwaadwillende beheerde server. De overige kwetsbaarheden kunnen onder meer leiden tot ongeautoriseerde toegang tot informatie en het omzeilen van toegangs- en beveiligingscontroles.\n\nGitLab heeft twee detectieregels gepubliceerd waarmee beheerders van self-managed GitLab-installaties kunnen zoeken naar mogelijke exploitatiepogingen van CVE-2026-110264. GitLab meldt vooralsnog geen actief misbruik van de kwetsbaarheid.", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0447"}, {"timestamp": "2026-10-22T09:12:12.147Z", "date_only": false, "value": "2026-10-22T09:12:12.147880Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0447", "record": "NCSC-2026-0447", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-22T09:12:12.147Z", "date_only": false, "value": "2026-10-22T09:12:12.147880Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0447", "record": "NCSC-2026-0447", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-22T09:12:12.147Z", "date_only": false, "value": "2026-10-22T09:12:12.147880Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0447", "record": "NCSC-2026-0447", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-22T16:18:19.040Z", "date_only": false, "value": "2026-10-22T16:18:19.040", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-15723", "record": "FKIE_CVE-2026-15723", "field": "lastModified"}]}