CVE-2026-6352

LowCVSS 2.7/10Last modified Jul 9, 2026

Description

GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user with auditor-level access to modify compliance violation records due to improper authorization on certain GraphQL operations.

Metrics

CVSS 3.1 2.7/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-863

Affected software

VendorProductVersions
GitLabGitLab>= 18.2, < 18.11.7; >= 19.0, < 19.0.4; >= 19.1, < 19.1.2

References

Timeline

Published
Jul 8, 2026
Last modified
Jul 9, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-635208.1Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.CVE-2026-635215.5Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.CVE-2026-635227.8Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally.CVE-2026-635236.1Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker tCVE-2026-635245.5Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.CVE-2026-635257.8Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally.CVE-2026-635267.8Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-635277.8Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.CVE-2026-635285.5Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.CVE-2026-635295.5Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.CVE-2026-635305.5Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.CVE-2026-635315.5Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-6352: Low severity, CVSS 2.7 | Vulnix