CVE-2026-0723

CVE-2026-0723 is a high-severity vulnerability in GitLab CE/EE, affecting versions 18.6 prior to 18.6.4, 18.7 prior to 18.7.2, and 18.8 prior to 18.8.2. This flaw allows an attacker with prior knowledge of a victim's credential ID to bypass two-factor authentication by submitting forged device responses. With a CVSS score of 7.4 (HIGH), the vulnerability has a network attack vector, high attack complexity, and can lead to high confidentiality and integrity impacts. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating high awareness.