{"schema":"vulnpedia.research/1","cve":"CVE-2026-2370","references":[{"url":"https://hackerone.com/reports/3522829","tags":["technical-description","exploit","permissions-required","Permissions Required","vendor-reference"],"source":"mitre","sourceId":"GitLab","modified":"2026-03-29T23:33:44.410Z","origins":[{"source":"mitre","sourceId":"GitLab","modified":"2026-03-29T23:33:44.410Z","url":"https://hackerone.com/reports/3522829"},{"source":"nvd","sourceId":"CVE-2026-2370","modified":"2026-07-15T02:19:30.360","url":"https://hackerone.com/reports/3522829"},{"source":"redhat","sourceId":"CVE-2026-2370","modified":"2026-06-30T04:13:24+00:00","url":"https://hackerone.com/reports/3522829"}]},{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/589635","tags":["Broken Link","vendor-reference"],"source":"mitre","sourceId":"GitLab","modified":"2026-03-29T23:33:44.410Z","origins":[{"source":"mitre","sourceId":"GitLab","modified":"2026-03-29T23:33:44.410Z","url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/589635"},{"source":"nvd","sourceId":"CVE-2026-2370","modified":"2026-07-15T02:19:30.360","url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/589635"},{"source":"redhat","sourceId":"CVE-2026-2370","modified":"2026-06-30T04:13:24+00:00","url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/589635"}]},{"url":"https://about.gitlab.com/releases/2026/03/25/patch-release-gitlab-18-10-1-released/","tags":["Patch","Release Notes","vendor-reference"],"source":"mitre","sourceId":"GitLab","modified":"2026-03-29T23:33:44.410Z","origins":[{"source":"mitre","sourceId":"GitLab","modified":"2026-03-29T23:33:44.410Z","url":"https://about.gitlab.com/releases/2026/03/25/patch-release-gitlab-18-10-1-released/"},{"source":"nvd","sourceId":"CVE-2026-2370","modified":"2026-07-15T02:19:30.360","url":"https://about.gitlab.com/releases/2026/03/25/patch-release-gitlab-18-10-1-released/"},{"source":"redhat","sourceId":"CVE-2026-2370","modified":"2026-06-30T04:13:24+00:00","url":"https://about.gitlab.com/releases/2026/03/25/patch-release-gitlab-18-10-1-released/"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2370","tags":["vdb-entry","x_refsource_REDHAT","vendor-reference"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-15T01:18:09.229Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-15T01:18:09.229Z","url":"https://access.redhat.com/security/cve/CVE-2026-2370"},{"source":"nvd","sourceId":"CVE-2026-2370","modified":"2026-07-15T02:19:30.360","url":"https://access.redhat.com/security/cve/CVE-2026-2370"},{"source":"redhat","sourceId":"CVE-2026-2370","modified":"2026-06-30T04:13:24+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-2370"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2452920","tags":["issue-tracking","x_refsource_REDHAT","vendor-reference"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-15T01:18:09.229Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-15T01:18:09.229Z","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2452920"},{"source":"nvd","sourceId":"CVE-2026-2370","modified":"2026-07-15T02:19:30.360","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2452920"},{"source":"redhat","sourceId":"CVE-2026-2370","modified":"2026-06-30T04:13:24+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2452920"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2370.json","tags":["x_sadp-csaf-vex","vendor-advisory"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-15T01:18:09.229Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-15T01:18:09.229Z","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2370.json"},{"source":"nvd","sourceId":"CVE-2026-2370","modified":"2026-07-15T02:19:30.360","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2370.json"},{"source":"redhat","sourceId":"CVE-2026-2370","modified":"2026-06-30T04:13:24+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2370.json"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2370","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-2370","modified":"2026-06-30T04:13:24+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-2370","modified":"2026-06-30T04:13:24+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-2370"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2370","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-2370","modified":"2026-06-30T04:13:24+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-2370","modified":"2026-06-30T04:13:24+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2370"}]},{"source":"euvd","sourceId":"EUVD-2026-17046","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-17046","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-17046","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-17046"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-2370","modified":"2026-06-30T04:13:24+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2370.json","productId":"openshift_pipelines:openshift-pipelines/pipelines-console-plugin-rhel9","product":"openshift-pipelines/pipelines-console-plugin-rhel9 as a component of OpenShift Pipelines","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/pipelines-console-plugin-rhel9?repository_url=registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-2370","modified":"2026-06-30T04:13:24+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2370.json"}]},{"source":"redhat","sourceId":"CVE-2026-2370","modified":"2026-06-30T04:13:24+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2370.json","productId":"red_hat_openshift_container_platform_4:openshift4/ose-console","product":"openshift4/ose-console as a component of Red Hat OpenShift Container Platform 4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/ose-console?repository_url=registry.redhat.io/openshift4/ose-console","origins":[{"source":"redhat","sourceId":"CVE-2026-2370","modified":"2026-06-30T04:13:24+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2370.json"}]},{"source":"redhat","sourceId":"CVE-2026-2370","modified":"2026-06-30T04:13:24+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2370.json","productId":"red_hat_openshift_container_platform_4:openshift4/ose-console-rhel9","product":"openshift4/ose-console-rhel9 as a component of Red Hat OpenShift Container Platform 4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/ose-console-rhel9?repository_url=registry.redhat.io/openshift4/ose-console-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-2370","modified":"2026-06-30T04:13:24+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2370.json"}]}],"vendorCoverage":{"total":3,"shown":3,"omitted":0,"source":"redhat"}}