NVD や CVE、ほか複数の脅威フィードを束ね、RCE など高リスクな事象を深く追える一覧です。CVSS と EPSS を組み合わせ、Exploit 参照や PoC の有無から悪用しやすさを追跡します。ベンダー修正や緩和策の文脈とあわせて優先度を決め、対応サイクルを短く保ちつつ重要資産を守る支援をします。
Assigner（CNA／発行元）：[email protected] この条件を外す
| CVE | 説明 | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|
| CVE-2026-6537 | ZigBee protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service | 5.5 | 0.18% | 2026-04-30 | 2026-06-17 |
| CVE-2026-6536 | DLMS/COSEM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 | 5.5 | 0.18% | 2026-04-30 | 2026-06-17 |
| CVE-2026-6534 | USB HID protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service | 5.5 | 0.18% | 2026-04-30 | 2026-06-17 |
| CVE-2026-6525 | IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.4 | 5.5 | 0.18% | 2026-05-02 | 2026-06-17 |
| CVE-2026-6277 | GitLab has remediated an issue in GitLab EE affecting all versions from 13.9 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user with Security Manager-role permissions to manage project security configuration even when the relevant feature was in a disabled state, due to incorrect authorization enforcement. | 4.3 | 0.18% | 2026-06-11 | 2026-06-17 |
| CVE-2026-3176 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.6 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user with limited permissions to access project information due to insufficient authorization checks. | 3.1 | 0.18% | 2026-06-25 | 2026-06-26 |
| CVE-2025-7659 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an unauthenticated user to steal tokens and access private repositories by abusing incomplete validation in the Web IDE. | 8.0 | 0.18% | 2026-02-11 | 2026-06-17 |
| CVE-2025-12506 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.5 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user to create a repository where the content displayed in the web interface differed from the content available for download, due to improper handling of Git reference name resolution. | 3.5 | 0.18% | 2026-07-08 | 2026-07-09 |
| CVE-2026-3201 | USB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service | 4.7 | 0.18% | 2026-02-25 | 2026-06-17 |
| CVE-2025-4439 | An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that could have allowed an authenticated user to perform cross-site scripting attacks when the instance is served through certain content delivery networks. | 7.7 | 0.18% | 2025-07-23 | 2026-06-17 |
| CVE-2026-8716 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.7 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that under certain conditions could have allowed an authenticated user to access CI data from a different ref type than intended. | 4.3 | 0.19% | 2026-05-27 | 2026-06-17 |
| CVE-2026-6269 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user with developer-role permissions to modify hidden merge requests due to incorrect authorization enforcements. | 5.4 | 0.19% | 2026-06-11 | 2026-06-17 |
| CVE-2026-3848 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.11 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user to make unintended internal requests through proxy environments under certain conditions due to improper input validation in import functionality. | 5.0 | 0.19% | 2026-03-11 | 2026-06-17 |
| CVE-2026-2995 | GitLab has remediated an issue in GitLab EE affecting all versions from 15.4 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an authenticated user to add email addresses to targeted user accounts due to improper sanitization of HTML content. | 7.7 | 0.19% | 2026-03-25 | 2026-06-17 |
| CVE-2026-15163 | Multiple protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allow denial of service | 5.5 | 0.19% | 2026-07-08 | 2026-07-09 |
| CVE-2026-6531 | SANE protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service | 5.5 | 0.19% | 2026-04-30 | 2026-06-17 |
| CVE-2026-6073 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user to execute arbitrary JavaScript in other users' browsers due to improper input sanitization. | 8.7 | 0.19% | 2026-05-14 | 2026-06-17 |
| CVE-2026-11379 | GitLab has remediated an issue in GitLab EE affecting all versions from 13.11 prior to 18.11.6, 19.0 prior to 19.0.3, and 19.1 prior to 19.1.1 in which incorrect authorization in DAST site profile management could allow a user with Developer role to exfiltrate DAST site profile secrets under certain conditions. | 5.3 | 0.19% | 2026-06-25 | 2026-06-26 |
| CVE-2021-22194 | In all versions of GitLab, marshalled session keys were being stored in Redis. | 5.7 | 0.19% | 2021-03-26 | 2026-06-16 |
| CVE-2026-6063 | GitLab has remediated an issue in GitLab EE affecting all versions from 11.10 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that under certain conditions could have allowed an authenticated user with developer-role permissions to remove code owner approval rules from merge requests due to improper access control. | 4.3 | 0.19% | 2026-05-14 | 2026-06-17 |