GitLab CE / EE — Security Intelligence & Vulnerability Profile

1. Software Identity & Security Posture

Parameter	Technical Specification
Official Name	GitLab CE / EE
Vendor / Project	`gitlab`
Canonical ID	`gitlab:gitlab`
Versioning Scheme	`semver`
CPE Identifiers	`cpe:2.3:a:gitlab:gitlab::::::::`
Overall Posture	CRITICAL
Recommended Safe Release	19.3.2

Documented CVEs

2 vulnerabilities cataloged in the Hermes intelligence repository.

CISA KEV Entries

2 flaws with confirmed active in-the-wild exploitation.

Weaponized Exploits

2 vulnerabilities with publicly available PoCs or weaponized exploit tooling.

Remediation Target

Recommended upgrade to 19.3.2 to neutralize known flaws.

2. 30-Day Risk Trajectory & Trend Evolution

Progression of Hermes Threat Score (HTS) posture and maximum EPSS probability over the last 30 days:

Current HTS Score

0 / 100

= Stable over 30d

Max EPSS (Exploitation)

94.7 %

= Stable over 30d

CISA KEV Activity

Active in-the-wild exploitation

HTS Trend Curve (D-30 → Today)2026-08-12 → 2026-09-10

3. Vulnerability History & Version Applicability Matrix

CVE	CVSS Score	EPSS Probability	CISA KEV	Affected Versions	Fixed In	Hermes Analysis
CVE-2026-85706	10 (CRITICAL)	9.3%	CISA KEV	< v19.1.8, < v19.2.6, < v19.3.2	`19.1.8`, `19.2.6`, `19.3.2`	Analysis →
CVE-2023-7028	10 (CRITICAL)	94.6%	CISA KEV	< v16.5.6, < v16.6.4, < v16.7.2	`16.5.6`, `16.6.4`, `16.7.2`	-

4. Ransomware & Threat Actor Exposure

Vulnerabilities impacting GitLab CE / EE are actively leveraged in real-world intrusion campaigns:

CVE-2026-85706: Active Exploitation in Wild (Read deep dive analysis)
CVE-2023-7028: Known in opportunistic exploitation

5. Evaluate Running Versions in Interactive Workbench

Are you operating GitLab CE / EE in your infrastructure? Inspect your running build to evaluate applicability, confidence score, and security deltas:

Launch Software Intelligence Workbench for GitLab CE / EE Run deterministic in-browser evaluation, calculate HTS threat reduction, and plan your upgrade path.